Re: [Fed-Talk] PKI SIGNED E-MAIL
Re: [Fed-Talk] PKI SIGNED E-MAIL
- Subject: Re: [Fed-Talk] PKI SIGNED E-MAIL
- From: "O'Donnell, Dan" <email@hidden>
- Date: Fri, 04 Nov 2011 19:10:34 +0000
- Thread-topic: [Fed-Talk] PKI SIGNED E-MAIL
And for anybody that has an unamerican name - such as a name that has
punctuation embedded like O'Somebody - be advised that .mil CACs seem
unable to handle these names. So they ARE going to change your name for
you. Which means you need to be aware of it in the GAL and the local
configuration and the certificates.
Of course State Department can spell your name correctly (passport), as
can IRS (tax), but INS/USCIS cannot. I don't know about other government
agencies. YMMV. Of course every country in western Europe knows how to
program their computers to handle Celtic names, but our government
apparently does not.
</rant>
Dan O'Donnell
On 11/4/11 11:55 AM, "Dave Schroeder" <email@hidden> wrote:
>The sender needs to take care of it, and they have two choices:
>
>They can update their email address to be all lowercase (desirable, and
>the convention for email addresses anyway), or they can have their cert
>updated to match the desired case of their email address.
>
>- Dave
>
>On Nov 4, 2011, at 1:38 PM, Mark A. Bienz wrote:
>
>> I checked the case and you are right...I see on the e-mail
>>Firstname.MI.Lastname and the e-mail certificate shows
>>firstname.mi.lastname. So what do we have to do or is this something
>>the sender has to take care of...assuming this is why I am getting the
>>error?
>>
>> I am using Mac OSX mail client.
>>
>> Mark
>>
>> On Nov 4, 2011, at 2:19 PM, Disiena, Ridley J. (GRC-VO00)[DB Consulting
>>Group, Inc.] wrote:
>>
>>>
>>> One possibility: RFC 822 Names - OS X interprets the 822 entries as
>>>case sensitive. If the sending address does not match the RFC 822 name
>>>in the senders certificate, that would be the error you get. Look at
>>>the certificate entry and email header and see if they match case.
>>>
>>> -Ridley
>>>
>>> On Nov 4, 2011, at 2:12 PM, Mark A. Bienz wrote:
>>>
>>>> Folks,
>>>>
>>>> Many of the e-mail senders I receive mail from work perfectly; e.g.,
>>>>they can sign e-mail and encrypt and I can see that it is a valid
>>>>signature and I can decrypt their message. However some senders, even
>>>>some I have been able to read and decrypt in the past give me the
>>>>following error message:
>>>>
>>>> Unable to very message signature
>>>>
>>>> I have checked their certificates they are good. What do I need to
>>>>do...or what is it they are doing wrong.
>>>>
>>>> Mark
>>>> _______________________________________________
>>>> Do not post admin requests to the list. They will be ignored.
>>>> Fed-talk mailing list (email@hidden)
>>>> Help/Unsubscribe/Update your Subscription:
>>>>
>>>>ov
>>>>
>>>> This email sent to email@hidden
>>>
>>
>> _______________________________________________
>> Do not post admin requests to the list. They will be ignored.
>> Fed-talk mailing list (email@hidden)
>> Help/Unsubscribe/Update your Subscription:
>>
>> This email sent to email@hidden
>
> _______________________________________________
>Do not post admin requests to the list. They will be ignored.
>Fed-talk mailing list (email@hidden)
>Help/Unsubscribe/Update your Subscription:
>
>This email sent to email@hidden
__________________________________________________________________________
This email message is for the sole use of the intended recipient(s) and
may contain confidential information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply email and destroy all copies
of the original message.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden