Just finished a bit of testing with a CAC card and OS X Mail, what I
found on my system:
Mail.app Version 2.0.5 (746/746.2) under OS X 10.4.4 (build 8G32)
Mail will not see the CAC card if the CAC card is inserted in the
reader after OS X Mail is launched, you will not be able to sign,
encrypt, or decrypt until you quit Mail, insert the CAC card, and
relaunch Mail (I believe under OS X 10.3.x you only needed to create
the new message after inserting the CAC card).
If you have done the above steps and then remove the CAC card from
the reader without quitting Mail first, there is a chance that Mail
will crash. In my test I decrypted a test message, deleted that
message, looked at a different mailbox, and then removed the CAC
card, then Mail crashed. Perhaps if you wait longer and the card re-
locks first it is not a problem. Perhaps it was an "isolated" case,
perhaps not, perhaps you might wish to be careful about when you
insert and remove the CAC card with regards to Mail.
There has been the statement that in order to sign email the "From"
email address has to match the CAC card, that is only true for OS X
Mail and some other email clients.
I know for a fact that some email clients, Thunderbird and Mozilla I
believe, do not require the "From" address to match the CAC card (I
lost an argument on this when the other person demonstrated this
quite clearly). So just because a message is signed does not mean it
was signed by the person listed in the From address or in any other
header in the message.
OS X Mail does not clearly tell you who the message was signed by.
Michael
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/fed-talk/email@hidden
