Yes, I checked RFC 821 which states that the LHS is case sensitive for "some" hosts, the RHS is not case sensitive. MTAs must take care to preserve LHS case. I worked in messaging systems for years and all I remember was that we went to great pains to preserve case, of all parts of an address.
Darn - I guess I must check ALL my address book names.
I wonder if there is some Perl script or something that might do this for me, I wonder if I have the time to write one, wonder if its worth while...
Anyway, I now have Citrix on the Mac working with my CAC card and reader and everything works as it should, just like my PC brethren - only better!
Thanks for your help - Lawrence On Jul 30, 2007, at 3:23 PM, Timothy J. Miller wrote: On Jul 30, 2007, at 1:57 PM, Lawrence D Hare wrote:
Maybe I am wrong but it seems to me that the email address in a certificate must match the email address on the message which match includes the CASE of letters in the address. So if I have a bunch of user names I entered in Address Book, like - ages ago, and now I am accumulating certificates which have the same email address, but with a different case, there is no match when I send to some whose certificate I actually have. Mail, or keychain, will not see it.
Email is classified as "Case Preserved" in that all matching is done in the same case but the way the address is entered by the user is "passed through." So email@hidden is the same as email@hidden as far as an email engine goes. But not for certificate identification on the Mac it seems.
Actually, no. According to the standards, the local-part (LHS of the @) of an email address is case-sensitive. So email@hidden and email@hidden are, according to the RFCs, different email addresses.
Now, it's common in both MTAs and MUAs to treat the local-part as a case-insensitive string, but that's not *strictly* correct. Apple has been strict in this case.
-- Tim
_______________________________________ Lawrence Hare GFEBS Systems Engineer Process Manager (o) 703 682 3415 (c) 301 351 5439
|