RE: AS2-SMIME : has the certificate to be included inside thesignatu re?

No , that's one of the main points of X.509 certificates.

[Unless you are discussing self-signed certificates (the X.509 equivalent 
of "trust me, because I say so - signed me")]

so .....

Is there a published way for an AS-2 implementation to map the "AS2-From" 
field to an X.509 DN ?
Or does AS2 assume that there is always some OOB mechanism for 
establishing identity (AS2-To/From) to certificate mappings ?

If the former - who needs to bloat messages with certificates?
If the latter - why ?

Paul
--
Paul Ford-Hutchinson :  eCommerce application security : 
[email protected]
MPT-6, IBM , PO Box 31, Birmingham Rd, Warwick, CV34 5JL +44 (0)1926 
462005
http://www.ford-hutchinson.com/~fh-1-pfh/ftps-ext.html





"Rishel,Wes" <[email protected]>
Sent by: [email protected]
05/06/2003 15:23

 
        To:     "Jess Sightler" <[email protected]>, 
<[email protected]>
        cc:     <[email protected]>
        Subject:        RE: AS2-SMIME : has the certificate to be included inside thesignatu re?

 



What is the benefit of sending the cert with the message? If you truly 
want to authenticate the originator you have to acquire the cert by 
independent, trusted means, don't you?

-----Original Message-----
From: [email protected]
[mailto:[email protected]]On Behalf Of Jess Sightler
Sent: Thursday, June 05, 2003 6:36 AM
To: [email protected]
Cc: [email protected]
Subject: Re: AS2-SMIME : has the certificate to be included inside
thesignatu re?



I can't speak 100% from the spec on this, but I know that iSoft makes
sending the Certificate with a signature optional.

Based on that, I believe that it is an option to not send the cert.  I
believe that sending the Cert would be a good practice, however.

Thanks,
Jess


On Thu, 2003-06-05 at 09:58, [email protected] wrote:
> Hello,
>
>
>
> I am new on this list - and I need your help.
>
>
>
> AS2: when sending a signed message (the original message which can
> also be signed, or a signed MDN), has the signer's certificate to be
> included inside of the signature MIME part?
>
> Is it mandatory or should AS2 compliant products accept both? (signed
> messages containing the cert, or not containing it, in which case they
> would try to find a certificate on the local key store etc.)
>
>
>
> Regards,
>
> -----------------------------------------
> Ludan STOECKLE
> DSI Groupe Casino - Etudes
>
> 04 77 45 48 01
>
> [email protected]
> -----------------------------------------
>
>
>
>
>
>
--
=======================================
Jess Sightler
Senior Developer
Exim Technologies
131 Falls Street
Greenville SC 29601
Phone: 864-679-4651
=======================================