Discussion:
Outlook Express 6/Lotus Notes Security Compatibility
(too old to reply)
Alan C.Brown
2004-04-18 14:14:14 UTC
Permalink
Does anyone know whether digitally signed and encrypted e-mail messages can
be sent between Outlook Express 6 and the Lotus Notes e-mail client ?

Thank you

Alan C. Brown
Caliban
2004-04-18 14:59:07 UTC
Permalink
Post by Alan C.Brown
Does anyone know whether digitally signed and encrypted e-mail messages can
be sent between Outlook Express 6 and the Lotus Notes e-mail client ?
If you use an X.509 certificate rather than the default Notes
certificate and get the public keys stored in the right places....

.
Alan C.Brown
2004-04-19 03:51:44 UTC
Permalink
Post by Caliban
Post by Alan C.Brown
Does anyone know whether digitally signed and encrypted e-mail messages can
be sent between Outlook Express 6 and the Lotus Notes e-mail client ?
-----------------
Post by Caliban
If you use an X.509 certificate rather than the default Notes
certificate and get the public keys stored in the right places....
-------------------
Thanks for your reply.
What is an X.509 certificate ?
Where can I get one ?
Do X.509 certificates have to be used in both Lotus Notes & Outlook Express6?
Where is the right place to store the public keys in Lotus Notes ?

Alan C. Brown
Caliban
2004-04-19 15:47:53 UTC
Permalink
Post by Alan C.Brown
Post by Caliban
Post by Alan C.Brown
Does anyone know whether digitally signed and encrypted e-mail messages can
be sent between Outlook Express 6 and the Lotus Notes e-mail client ?
-----------------
Post by Caliban
If you use an X.509 certificate rather than the default Notes
certificate and get the public keys stored in the right places....
-------------------
Thanks for your reply.
What is an X.509 certificate ?
An internet standard digital certificate
Post by Alan C.Brown
Where can I get one ?
Verisign for example
Post by Alan C.Brown
Do X.509 certificates have to be used in both Lotus Notes & Outlook Express6?
For bilateral communication yes.
Post by Alan C.Brown
Where is the right place to store the public keys in Lotus Notes ?
In the correspondent's person document. This will be in either the
user's personal address book (if the requirement is for a single Notes
user to mail to them) or in an organisation-wide directory if anybody
can mail them.
Post by Alan C.Brown
Alan C. Brown
Alan C.Brown
2004-04-20 06:14:03 UTC
Permalink
Post by Alan C.Brown
Post by Alan C.Brown
Post by Caliban
Does anyone know whether digitally signed and encrypted e-mail messages >>can be sent between Outlook Express 6 and the Lotus Notes e-mail client ?
Alan C. Brown
-----------------
Post by Alan C.Brown
Post by Caliban
If you use an X.509 certificate rather than the default Notes
certificate and get the public keys stored in the right places....
-------------------
Thanks for your reply.
What is an X.509 certificate ?
Where can I get one ?
Do X.509 certificates have to be used in both Lotus Notes & Outlook Express6?
Where is the right place to store the public keys in Lotus Notes ?
Thanks for your reply.
Alan C. Brown
------------------------
Post by Alan C.Brown
Post by Alan C.Brown
What is an X.509 certificate ?
An internet standard digital certificate
Post by Alan C.Brown
Where can I get one ?
Verisign for example
Post by Alan C.Brown
Do X.509 certificates have to be used in both Lotus Notes & Outlook Express6?
For bilateral communication yes.
Post by Alan C.Brown
Where is the right place to store the public keys in Lotus Notes ?
In the correspondent's person document. This will be in either the
user's personal address book (if the requirement is for a single Notes
user to mail to them) or in an organisation-wide directory if anybody
can mail them.
--------------------------
Dear Caliban

Thanks for your reply.

I woulld appreciate some clarification.

To recap, I am using OE6, and I want to send digitally signed and
encrypted e-mail to someone in a company using Lotus Notes, and
vice-versa, I want her to send me digitally signed and encrypted
e-mail.

Therefore, I would like to advise her how to set up her Verisign
Digital ID and my public key in her Lotus Notes, so that we will be
able to send digitally signed & encrypted e-mail to each other.

Therefore I need to know :

1. How she has to configure/setup her Verisign Digital ID in Lotus
Notes ?

2. Where is the correct place for her to store my public key in Lotus
Notes ?

As regards # 2, you seem to be giving 2 options :

1. That she stores my public key in her personal(Lotus Notes)address
book, if she is a "Single Notes" user.

2. That she stores my public key in an organisation-wide (Lotus
Notes)directory so that anybody in her company can e-mail me ?

Is that a correct interpretation of what you said ?

What is a "Single Notes" user ?

What is the other type of Lotus Notes user ?

I think that you will gather from this, that I do not have access to
Lotus Notes, and therefore do not know anyhting about it's e-mail
client and security setup.

Thank you for your help

Alan C. Brown
Caliban
2004-04-20 15:36:05 UTC
Permalink
Post by Alan C.Brown
1. That she stores my public key in her personal(Lotus Notes)address
book, if she is a "Single Notes" user.
2. That she stores my public key in an organisation-wide (Lotus
Notes)directory so that anybody in her company can e-mail me ?
Is that a correct interpretation of what you said ?
Yes, and as only she needs to be able to encrypt messages to you then
she can store the public key in her personal address book without
recourse to her system administrators.
Post by Alan C.Brown
What is a "Single Notes" user ?
An individual, as in this case - though I wrote it originally as [a
single Notes user] - I didn't add the quotes.
Post by Alan C.Brown
What is the other type of Lotus Notes user ?
There are no other types - certainly none you need worry about anyway.
I just meant one single user as opposed to a group.
Alan C.Brown
2004-04-21 03:20:02 UTC
Permalink
Post by Caliban
Post by Alan C.Brown
1. That she stores my public key in her personal(Lotus Notes)address
book, if she is a "Single Notes" user.
2. That she stores my public key in an organisation-wide (Lotus
Notes)directory so that anybody in her company can e-mail me ?
Is that a correct interpretation of what you said ?
Yes, and as only she needs to be able to encrypt messages to you then
she can store the public key in her personal address book without
recourse to her system administrators.
Post by Alan C.Brown
What is a "Single Notes" user ?
An individual, as in this case - though I wrote it originally as [a
single Notes user] - I didn't add the quotes.
Post by Alan C.Brown
What is the other type of Lotus Notes user ?
There are no other types - certainly none you need worry about anyway.
I just meant one single user as opposed to a group.
-------------
Thanks a lot. You have been a great help.

Alan C. Brown
Alan C.Brown
2004-04-21 16:19:36 UTC
Permalink
Post by Alan C.Brown
Post by Caliban
Post by Alan C.Brown
1. That she stores my public key in her personal(Lotus Notes)address
book, if she is a "Single Notes" user.
2. That she stores my public key in an organisation-wide (Lotus
Notes)directory so that anybody in her company can e-mail me ?
Is that a correct interpretation of what you said ?
Yes, and as only she needs to be able to encrypt messages to you then
she can store the public key in her personal address book without
recourse to her system administrators.
Post by Alan C.Brown
What is a "Single Notes" user ?
An individual, as in this case - though I wrote it originally as [a
single Notes user] - I didn't add the quotes.
Post by Alan C.Brown
What is the other type of Lotus Notes user ?
There are no other types - certainly none you need worry about anyway.
I just meant one single user as opposed to a group.
-------------
Thanks a lot. You have been a great help.
Alan C. Brown
--------------

I'm back again with a few more questions.

Apart from storing the OE6 user's public key in the Lotus Notes
address book, what else does the single Lotus Notes user have to do to
configure Lotus Notes to use a Verisign Digital ID (certificate)
instead of the default Lotus Notes certificate ?

Can she configure Lotus Notes so that both her default Lotus Notes
certificate and her Verisign certificate are available at all times
for sending & receiving digitally signed & encrypted e-mail, depending
on who she is corresponding with ? That is, so both certificates would
be available at all times, and she simply selects which one to use on
an as-need basis ?

Is the ability of Lotus Notes to use X.509 certificates limited to
particular versions of Lotus Notes ?

Is there anywhere that I can get a Lotus Notes step-by-step guide for
congfiguring Lotus Notes to use digital IDs and public keys (both
default & X.509) to send and receive digitally signed and encrypted
e-mail ?
For example, along the lines of "Step-byStep guide to Public Key
features in Outlook Express 5.0 and Above" :
http://www.microsoft.com/technet/prodtechnol/windows2000serv/howto/pubkeyox.mspx

Thank you

Alan C. Brown
H***@t-online.de
2004-04-28 18:47:57 UTC
Permalink
Hello Alan,

She does not need a verisign certificate. When it is too expensive, her
admin could create an internet certificate by his own. With it you can
create your own X.509 certficates. The only disadvantage is, that the
recipient gets a message indicating, that the signature is not trusted,
because it is not signed by a well known CA. But when you say this
certificate is trusted, then you can work with it, with no extra costs!

Normally the X.509 certificates are always taken when you send email to
internet recipients. Therefore she does not have to select the certificate
when she sends the mail. She should only take care, that she sends email
in Mime format to the internet. She can set this switch in her workprofile
(Tab Mail -> Format of mail to internet adresses).

The X.509 certificates are supported in LN since R4.x (as far as I know).

HTH
Holger

Loading...