Re: secure mailinglists

2002-03-08 Thread Rich Salz
Does it *have* to be a conventional mailing list? How about a web-based archive. Your CA issues an SSL cert to the server. It can also issue certs to mailing list members, and/or SSL client certs. To "post" users either send signed mail to an alias (which verifies the signature and makes sure

Re: secure mailinglists

2002-03-08 Thread Dr S N Henson
Damian Hesse wrote: > > Hi everybody, > > we have set up our own CA and generated for everybody > user certificates for secure communication. It really works > fine. > > The task: now we want to set up mailinglists (server side) > like "[EMAIL PROTECTED]" where some users of our company and > s

Re: secure mailinglists

2002-03-08 Thread Roman Zillek
Hi, my pseudo code solution would look about like the following: Legend: E...encryption function D...decryption funtion S...signing function pubK[x]...public key party "x" privK[x]...private key party "x" -- ListContribution: E(message+S[message,

Re: secure mailinglists

2002-03-08 Thread Bear Giles
> Message senders encrypt the message with the public key of the > mailinglist. The mailinglist server decrypts the message using the > private key for the mailinglist and encrypts it again individually > for every recipient. The problematic part is the signature, I guess. > Would it be possible t

Re: secure mailinglists

2002-03-08 Thread Sean O'Riordain
Sorry Damian, but I don't see why the mail server needs to have the _private_ keys of the individuals... If I have the story correct... 1) You generate a key pair on the mail server and distribute the public key to your users. The public keys of your users are made accessible to the list-s

Re: secure mailinglists

2002-03-07 Thread Damian Hesse
Jörn, > >The task: now we want to set up mailinglists (server side) > >like "[EMAIL PROTECTED]" where some users of our company and > >some from a customer should be able to write signed and > >encryted emails and everybody on the list should be able to > >read it. > > > >The question is how shou

Re: secure mailinglists

2002-03-07 Thread Vadim Fedukovich
On Thu, 7 Mar 2002, Damian Hesse wrote: > Hi everybody, > > we have set up our own CA and generated for everybody > user certificates for secure communication. It really works > fine. > > The task: now we want to set up mailinglists (server side) > like "[EMAIL PROTECTED]" where some users of our

Re: secure mailinglists

2002-03-07 Thread Joern Sierwald
At 21:41 07.03.2002 +0100, you wrote: >Hi everybody, > >we have set up our own CA and generated for everybody >user certificates for secure communication. It really works >fine. > >The task: now we want to set up mailinglists (server side) >like "[EMAIL PROTECTED]" where some users of our company