• Topic
  • Discussion
    • ODS.ODSMailSendDigitallySignedMsg(Last) -- DAVWikiAdmin? , 2017-06-29 07:29:54 Edit
    [TXT]
    [PLAIN]
    [DOCBOOK]
    WebDAV System Administrator 2017-06-29 07:29:54

    ODS Guide for Sending Digitally Signed Messages

    What?

    A digital certificate is a pair of files on your computer that you can use to create the digital equivalent of handwritten signatures and sealed envelopes. Each pair of files is divided into two parts: the public key and the private key. The public key is the portion that is shared; the private key is the portion that you, and only you, should have access to. Your computer and programs understand how to share only the public portion of your keys so that others can see them, while still keeping your private keys secure.

    For example, when sending an e-mail message, you can digitally sign the message by attaching your digital certificate. Once they receive the message, recipients can verify that it came from you by viewing the small attachment on the e-mail, which contains your public key information. This protects you from people who might try to "spoof" an e-mail that looks like it came from you but is really sent from a different e-mail account.

    Why?

    Sending Digitally signed email messages ensures the recipients that the message came from you and not someone pretending to be you.

    How?

    Digitally signing a message applies your signature to the message. This includes your SMIME + WebID? certificate (a digital means of proving your identity ) and public key ( the key a sender gives to a recipient so that the recipient can verify the sender's signature and confirm that the message was not altered).

    Assume the following sample scenario:

    1. There are 2 ODS users for ex. with names john and kate.
    2. john generated SMIME + WebID? Certificate which contains also Private Key.
    3. john logs in and goes to Profile Edit->Security->Certificate & Private Key



    4. john imports its certificate, for ex. with name: MyKey?:
      1. Hatch "Import key from local file"
      2. Click "Choose file" and select the generated from above SMIME + WebID? Certificate.



      3. Enter "Key Name": MyKey?
      4. Enter key's password.



      5. Finally click "Import Key".



    5. john and kate create their own ODS Webmail instances:
      1. Go to Application Settings -> Applications Management ->New Application -> Mail







      2. Click "Create and Launch Application".
    6. john goes to its ODS Webmail Application instance -> Preferences and selects:
      1. For "Digitally signing (with certificate)": the MyKey? private key imported from above;
      2. Hatch the check-box "Digitally sign messages (by default)"



    7. Finally, john confirms the changes by clicking "Save".
    8. john goes to "Write Message" and sends kate a SMIME+Web ID Signed Message with the following values:
      1. "To": <none>
      2. "Subject": test for digitally signed message
      3. "Message": This message should be digitally signed in.







    9. kate goes to its ODS Webmail "Inbox" where should be shown a new mail has arrived from john.



    10. The new mail message should have "options" field with the following information:
      1. The message is Digitally Signed or not: Yes / No
      2. WebID? ( if there is such).
      3. Indicator icon for digitally signed in msg. 

        options: Signed: Yes; WebID: http://ods-qa.openlinksw.com/dataspace/person/john#this





    Related