[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ms-cryptoapi
Subject:    Re: Key storage in Registry!
From:       Dr Stephen Henson <shenson () BIGFOOT ! COM>
Date:       1998-01-26 10:55:26
[Download RAW message or body]


John Boyer wrote:
>
>
> Finally, it looks like Outlook Express has a bit of a bug (or shall we say,
> an oversight).  When logged in as somebody else, I am able to send an email
> signed with a key that doesn't belong to me.  Or at least, that's how it
> appears.  Rather than being warned about this or getting some cryptoapi
> failure, I get no indication that my send has failed.

This is a *very* annoying bug in Outlook Express. If for any reason it
has trouble getting the info require to send a message (e.g. users
private key) it appears to work but sends out empty or invalid PKCS#7.

Steve.

----------------------------------------------------------------
Users Guide http://www.microsoft.com/sitebuilder/resource/mailfaq.asp
contains important info including how to unsubscribe.  Save time, search
the archives at http://microsoft.ease.lsoft.com/archives/index.html

[prev in list] [next in list] [prev in thread] [next in thread]