<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/xhtml; charset=utf-8">
</head>
<body>
<div style="font-family:sans-serif"><div style="white-space:normal">
<p dir="auto">On 17 Feb 2017, at 10:16, Robert M. Münch wrote:</p>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
<blockquote style="border-left:2px solid #777; color:#999; margin:0 0 5px; padding-left:5px; border-left-color:#999">
<p dir="auto">No, but when you sign a message then the recipient gains the ability to encrypt messages to you if they add your certificate to the keychain.</p>
</blockquote>
<p dir="auto">I think in S/MIME exist different types of certificates as I own one for signing but that can't be used for encryption. Not sure how this is handled.</p>
</blockquote>
<p dir="auto">This is not a problem when signing, but when encrypting then the message also needs to be encrypted for you (since otherwise you cannot view the message later on). MailMate cannot do this without a certificate available for doing encryption.</p>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
<p dir="auto">What is strange is this: I received an email where MM stated that it was successfully S/MIME decrypted. But I don't have any S/MIME encrypting certificate.</p>
</blockquote>
<p dir="auto">Your signing certificate must have been used to encrypt the message by the sender (I don't think this is technically a problem, but I don't think it is strictly correct behavior).</p>
<p dir="auto">MailMate has also not been very good at checking whether or not certificates were marked for use for signing/encryption, but <em>I think</em> the latest releases do respect this.</p>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
<p dir="auto">So I'm wondering why MM displays this message. Further I don't have a clue how the one who send me the email would have gained access to my S/MIME certificates.</p>
</blockquote>
<p dir="auto">They get your certificate if you have sent a signed message to him/her.</p>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
<blockquote style="border-left:2px solid #777; color:#999; margin:0 0 5px; padding-left:5px; border-left-color:#999">
<p dir="auto">I think this happens automatically in Apple Mail. In MailMate you have to explicitly add it to the keychain.</p>
</blockquote>
<p dir="auto">How do I add this to the keychain? Can I access the certificate anyhow?</p>
</blockquote>
<p dir="auto">Click on “Show Details” and then “Add to Keychain”.</p>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
<blockquote style="border-left:2px solid #777; color:#999; margin:0 0 5px; padding-left:5px; border-left-color:#999">
<blockquote style="border-left:2px solid #777; color:#BBB; margin:0 0 5px; padding-left:5px; border-left-color:#BBB">
<ol>
<li value="2">Answering the email with encryption & signing doesn't work. I get: "Failed to find valid certificate to encrypt for xyz.xyz@abc.com. The specified item could not be found in the keychain. Error code: -25300" (Note: This text is shown twice). But I can see the certificate for the recipient in one of my keychains.</li>
</ol>
</blockquote>
<p dir="auto">The error code means that it couldn't find a valid certificate.</p>
</blockquote>
<p dir="auto">For whom? For me or the guy I'm going to send an email to?</p>
</blockquote>
<p dir="auto">For the one with the email address <code style="background-color:#F7F7F7; border-radius:3px; margin:0; padding:0 0.4em" bgcolor="#F7F7F7">xyz.xyz@abc.com</code>.</p>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
<blockquote style="border-left:2px solid #777; color:#999; margin:0 0 5px; padding-left:5px; border-left-color:#999">
<p dir="auto">S/MIME and OpenPGP users should update to the latest test release (r5346). I've made several changes which I would like to have tested including an important bug fix for S/MIME (which I would like to release soon).</p>
</blockquote>
<p dir="auto">Ok, will do.</p>
</blockquote>
<p dir="auto">Thanks!</p>
<p dir="auto">-- <br>
Benny</p>
</div>
</div>
</body>
</html>