GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Connect » Digitally signing outgoing messages
Digitally signing outgoing messages [message #145359] Tue, 26 March 2019 21:45 Go to next message
fishtech is currently offline  fishtech
Messages: 609
Registered: September 2010
I'm looking at digitally signing outgoing messages since we have been victim of spear fishing attacks recently.

The following page shows it can be done natively within Kerio Connect server.

https://manuals.gfi.com/en/kerio/connect/content/email-clien ts/kerio-connect-client/digitally-signing-messages-in-kerio- connect-client-1581.html?Highlight=signing%20messages


However, it is not clear from the article whether signing works only for Kerio Connect Client and/or webmail. Or does this work for all mail outgoing through the server from an individual account, whether from iPhone, MacOS Mail, etc ?

I need the latter Smile

Many thanks,

ft.

[Updated on: Tue, 26 March 2019 21:45]

Report message to a moderator

Re: Digitally signing outgoing messages [message #145368 is a reply to message #145359] Wed, 27 March 2019 13:35 Go to previous messageGo to next message
Maerad is currently offline  Maerad
Messages: 275
Registered: August 2013
It says everywhere in the topic and text you linked "Kerio Connect Client".

Also - you can't sign every mail automagically, because this is not how this works. A signed mail requires a certificate for EVERY user itself!
You authenticate the USER, NOT a domain or company! So you have a company cert and every user needs his own personal s/mime cert, based on the company one (usually).
And this user needs to add the cert in their client of choice. Depending on the client, you can automate it in some way.

Here's some readup on that https://en.wikipedia.org/wiki/S/MIME

[Updated on: Wed, 27 March 2019 13:36]

Report message to a moderator

Re: Digitally signing outgoing messages [message #145370 is a reply to message #145368] Wed, 27 March 2019 14:41 Go to previous messageGo to next message
fishtech is currently offline  fishtech
Messages: 609
Registered: September 2010
Yes, I understand every user requires a certificate.

But Kerio Connect Webmail AND Kerio Connect Client allow the user to upload and configure their certificate.

Are you saying that digitally singed emails are only possible when using Kerio Connect Client? Even though they can be configured in Kerio webmail?

Quote:
It says everywhere in the topic and text you linked "Kerio Connect Client".

That is why I posted the question. It seems that the document could use some clarification.

dt.
Re: Digitally signing outgoing messages [message #145373 is a reply to message #145370] Wed, 27 March 2019 15:15 Go to previous messageGo to next message
freakinvibe is currently offline  freakinvibe
Messages: 589
Registered: April 2004
You have to configure mail message signing for each client. I use it on web mail, Outlook and iPhone. So I had to configure it 3 times.

So it depends if the client supports it.


Dexion Services AG - IT Support Services in Basel, Switzerland
https://dexionag.ch
Re: Digitally signing outgoing messages [message #145378 is a reply to message #145370] Wed, 27 March 2019 16:17 Go to previous message
Maerad is currently offline  Maerad
Messages: 275
Registered: August 2013
fishtech wrote on Wed, 27 March 2019 14:41
Yes, I understand every user requires a certificate.

But Kerio Connect Webmail AND Kerio Connect Client allow the user to upload and configure their certificate.

Are you saying that digitally singed emails are only possible when using Kerio Connect Client? Even though they can be configured in Kerio webmail?

Quote:
It says everywhere in the topic and text you linked "Kerio Connect Client".
That is why I posted the question. It seems that the document could use some clarification.

dt.
Your answer is actually in the link you posted Smile

Quote:
Signing all messages automatically

Kerio Connect Client can sign all your outgoing messages automatically.

Log in to your Kerio Connect Client securely via HTTPS.
Click Tools > Settings (in Windows Client), or Kerio Connect > Settings (in Mac Client), or your name > Settings (in Web Client).
And like I mentioned before, this is a client part setting, so they need to add it themself. But it works in Kerio's own programs. And any other mail client that supports signing.
Previous Topic: Free/Busy Calendar
Next Topic: Kerio Antispam - Scoring 10.0 all of a sudden
Goto Forum:
  


Current Time: Tue Mar 28 22:38:33 CEST 2023

Total time taken to generate the page: 0.09434 seconds