Mail Clients and S/MIME
Until tonight, I hadn’t seen a mail client that didn’t support S/MIME out of the box (heck, even Outlook Express has limited support for it). Then I installed KUbuntu Dapper Drake on my laptop and discovered that KMail/Kontact indeed does not support S/MIME out of the box in this distro. I’ve got this setup screen asking me for all kinds of S/MIME Validation information (checking CRLs vs OCSP, etc), but it’s all greyed out.
It can be enabled but why should I have to do that? Now comes the fun of importing the 100 or so client certs I have for people into the system.
Some comments I have read indicate that KMail is not sure about using OpenSSL because of licensing issues – so use gnuTLS or libnss, both of which are workable replacements for the client side of openSSL (depending on what you’re doing).
One thought on “Mail Clients and S/MIME”
Wow, glorious article and fantastic examples, Liam! You hit on a lot of great points here, this will be a resource I will come back to often.
Comments are closed.