Home > Ask the Security Experts > Application Security Questions & Answers > PKI system validation processes
Ask The Security Expert: Questions & Answers
EMAIL THIS

PKI system validation processes

Michael Cobb, featured expert EXPERT RESPONSE FROM: Michael Cobb, featured expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 09 January 2006
I have an S/MIME protocol question. How is the X.509 DN e-mail field validated when you reply to a digitally signed message and want to encrypt it?


BROWSE BY TAG
Application Security,   PKI and Digital Certificates,   Enterprise Identity and Access Management,   User Authentication Services,   Application and Platform Security,   Email Protection,   Email Security Guidelines, Encryption and Appliances,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Application Security
Are Web application penetration tests still important?
What does 'invoked by uid 78' mean?
How secure are iPhone App Store mobile applications?
What security software should be installed on Internet café computers?
Are message stubs a secure part of email retention policies?
How does a Web server model differ from an application server model?
Can Google Earth and other mash-up applications threaten enterprise security?
Do European laws prevent a U.S. company from blocking spam?
Can one antivirus program be used to get rid of spyware?
How to prevent cross-site scripting (XSS) session hijacking

PKI and Digital Certificates
Researchers to demonstrate new EV SSL man-in-the-middle hacks
Portable security storage device could replace OTP devices
What is most misunderstood about EV SSL certificates?
VeriSign addresses MD5 flaw
Rogue digital certificates strike blow to Internet security
Can any firm or organization get a digital signature certificate?
How to obtain a digital certificate for a server
PKI and digital certificates: Security, authentication and implementation
What is the best way to administer exams to students via computer?
Should computer exams be transmitted as PDF files or Word files?
PKI and Digital Certificates Research

Email Security Guidelines, Encryption and Appliances
What does 'invoked by uid 78' mean?
How to configure firewall ports for webmail system implementation
Fierce competition prompted new Cisco email security options
Cisco brings email security appliances closer to SaaS
Cisco offers more email security choices, but lacks vision
Information security book excerpts and reviews
Are message stubs a secure part of email retention policies?
Strategies for email archiving and meeting compliance regulations
Product Review: Astaro Mail Gateway 4000
What are the security risks of opening port 110 and port 25?

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
authentication server  (SearchSecurity.com)
Certificate Revocation List  (SearchSecurity.com)
Digital Signature Standard  (SearchSecurity.com)
HDCP  (SearchSecurity.com)
MD2  (SearchSecurity.com)
MD4  (SearchSecurity.com)
MD5  (SearchSecurity.com)
nonrepudiation  (SearchSecurity.com)
PKI  (SearchSecurity.com)
public key  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


In the X.509 public key infrastructure (PKI) system, a Certificate Authority (CA) issues a certificate binding a public key to a particular Distinguished Name (DN). A DN is a series of name-value pairs, such as uid=mike, that uniquely identify an individual or entity -- the certificate subject. For example, a typical DN looks something like this:

uid=mike,e=mike@abc.com,cn=mike,o=ABC Ltd.,c=GB

The meanings of the abbreviations before each equal sign are as follows:

  • uid: user ID
  • e: e-mail address
  • cn: the user's common name
  • o: organization
  • c: country

The user's public key and everything contained within the fields of an X.509 public key certificate -- including the DN -- is encrypted with the private key of the CA. Anyone who has access to a copy of the CA's certificate can verify the authenticity of the user's certificate by decrypting the user's DN with the public key contained in the CA's certificate. This verification method means that the information within a certificate cannot be altered, because if it is, the CA's signature will be invalidated. When someone sends a digitally signed e-mail, it contains a digital certificate. If there is a problem with the certificate, the e-mail program will send an alert.

To verify whether the digital certificate used is still valid, send a request for certificate information to the appropriate CA. The CA will send back information on the status of the certificate, including whether it has been revoked. Outlook Express has this feature. To enable it, go to the "Advanced" section of the "Security" tab in the "Options" settings. This automatically sends a request to the CA for information about the digital certificate when you open a signed message.


More Information

  • Learn more about S/MIME encryption here.
  • Attend E-mail Security School and learn tactics for securing your e-mail systems.




  • Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    Targeted Security Channel Tips for Resellers, Integrators and Consultants
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts