Developers of Sympa

["Jim Schaad" <address@concealed>]

Title: RE: [sympa-dev] What to do with errors in crypted distribution ?

I really should have responded sooner, however here is my response now:

1.  Sympa should have the ability to evaluate all certificates in the
database at a fixed frequency to look for currently bad and nearly bad
(on a time basis) certificates.

2.  A bad certificate should allow for 1) notification to the admin and
2) notification to the recipient.

3.  Sympa should allow for messages to be queued until new certificates
can arrive for individuals.

4.  You should look at the latest draft of the symetric key distribution
draft from the S/MIME working group as we are trying to define some
standard message formats for a) getting a certificate from an
individual, b) notifying recipients of certificate expiration.  If you
notice some missing items please let me know so that we can add them in.

jim

-----Original Message-----
From: address@concealed [mailto:address@concealed]
Sent: Thursday, August 24, 2000 3:02 AM
To: address@concealed
Subject: [sympa-dev] What to do with errors in crypted distribution ?

Hi

I'am working on Sympa MLM S/MIME features. Sympa already can
check S/MIME signature on messages .

Now Sympa can also receive a encrypted message sent to a list
(a list can have its own X509 certificat). In this case, Sympa
decrypts it using the list private key and then encrypts it for
each subscriber using subscriber's certificat. (subscriber's
certificat are cached by sympa when receiving a signed message).

I nedd your help to imagine what to do if Sympa do not have access to
some subscriber's certificat ? It is imposible to crypte the
message for those recipient so the message will not be distributed.

Should sympa notify the message sender ? the list owner or the
subscriber of thoses errors ?

-----------------------------------------------------------
Serge Aumont        Comité Réseaux des Universités
                     Campus Beaulieu
                     35042 Rennes Cedex   +33 99 84 71 47