Outlook Express 6/Lotus Notes Security Compatibility

Does anyone know whether digitally signed and encrypted e-mail messages can
be sent between Outlook Express 6 and the Lotus Notes e-mail client ?

Thank you

Alan C. Brown

acbrownus-at-yahoo.com (Alan C.Brown) wrote:

>Does anyone know whether digitally signed and encrypted e-mail messages can
>be sent between Outlook Express 6 and the Lotus Notes e-mail client ?

If you use an X.509 certificate rather than the default Notes
certificate and get the public keys stored in the right places....

..

> acbrownus-at-yahoo.com (Alan C.Brown) wrote:>
> >Does anyone know whether digitally signed and encrypted e-mail messages can
> >be sent between Outlook Express 6 and the Lotus Notes e-mail client ?
-----------------
> Caliban wrote in message news:<1r55801jhhrrm58a2ujb99en0rv7sftpu1@4ax.com>...
> If you use an X.509 certificate rather than the default Notes
> certificate and get the public keys stored in the right places....
>
-------------------
Thanks for your reply.
What is an X.509 certificate ?
Where can I get one ?
Do X.509 certificates have to be used in both Lotus Notes & Outlook Express6?
Where is the right place to store the public keys in Lotus Notes ?

Alan C. Brown

acbrownus-at-yahoo.com (Alan C.Brown) wrote:

>> acbrownus-at-yahoo.com (Alan C.Brown) wrote:>
>> >Does anyone know whether digitally signed and encrypted e-mail messages can
>> >be sent between Outlook Express 6 and the Lotus Notes e-mail client ?
>-----------------
>> Caliban wrote in message news:<1r55801jhhrrm58a2ujb99en0rv7sftpu1@4ax.com>...
>> If you use an X.509 certificate rather than the default Notes
>> certificate and get the public keys stored in the right places....
>>
>-------------------
>Thanks for your reply.
>What is an X.509 certificate ?

An internet standard digital certificate

>Where can I get one ?

Verisign for example

>Do X.509 certificates have to be used in both Lotus Notes & Outlook Express6?

For bilateral communication yes.

>Where is the right place to store the public keys in Lotus Notes ?

In the correspondent's person document. This will be in either the
user's personal address book (if the requirement is for a single Notes
user to mail to them) or in an organisation-wide directory if anybody
can mail them.



>
>Alan C. Brown

> acbrownus-at-yahoo.com (Alan C.Brown) wrote:
>
> >> acbrownus-at-yahoo.com (Alan C.Brown) wrote:>
> >> >Does anyone know whether digitally signed and encrypted e-mail messages >>can be sent between Outlook Express 6 and the Lotus Notes e-mail client ?

> >Alan C. Brown
> -----------------
> >> Caliban wrote in message news:<1r55801jhhrrm58a2ujb99en0rv7sftpu1@4ax.com>...
> >> If you use an X.509 certificate rather than the default Notes
> >> certificate and get the public keys stored in the right places....
> >>
> >-------------------
> >> acbrownus-at-yahoo.com (Alan C.Brown) wrote:>

> >Thanks for your reply.
> >What is an X.509 certificate ?
>
> >Where can I get one ?
>
> >Do X.509 certificates have to be used in both Lotus Notes & Outlook Express6?
>
> >Where is the right place to store the public keys in Lotus Notes ?
>
> >Thanks for your reply.

>>Alan C. Brown
------------------------
Caliban wrote in message news:...

> >What is an X.509 certificate ?
>
> An internet standard digital certificate
>
> >Where can I get one ?
>
> Verisign for example
>
> >Do X.509 certificates have to be used in both Lotus Notes & Outlook Express6?
>
> For bilateral communication yes.
>
> >Where is the right place to store the public keys in Lotus Notes ?
>
> In the correspondent's person document. This will be in either the
> user's personal address book (if the requirement is for a single Notes
> user to mail to them) or in an organisation-wide directory if anybody
> can mail them.
--------------------------
Dear Caliban

Thanks for your reply.

I woulld appreciate some clarification.

To recap, I am using OE6, and I want to send digitally signed and
encrypted e-mail to someone in a company using Lotus Notes, and
vice-versa, I want her to send me digitally signed and encrypted
e-mail.

Therefore, I would like to advise her how to set up her Verisign
Digital ID and my public key in her Lotus Notes, so that we will be
able to send digitally signed & encrypted e-mail to each other.

Therefore I need to know :

1. How she has to configure/setup her Verisign Digital ID in Lotus
Notes ?

2. Where is the correct place for her to store my public key in Lotus
Notes ?

As regards # 2, you seem to be giving 2 options :

1. That she stores my public key in her personal(Lotus Notes)address
book, if she is a "Single Notes" user.

2. That she stores my public key in an organisation-wide (Lotus
Notes)directory so that anybody in her company can e-mail me ?

Is that a correct interpretation of what you said ?

What is a "Single Notes" user ?

What is the other type of Lotus Notes user ?

I think that you will gather from this, that I do not have access to
Lotus Notes, and therefore do not know anyhting about it's e-mail
client and security setup.

Thank you for your help

Alan C. Brown

acbrownus-at-yahoo.com (Alan C.Brown) wrote:

>As regards # 2, you seem to be giving 2 options :
>
>1. That she stores my public key in her personal(Lotus Notes)address
>book, if she is a "Single Notes" user.
>
>2. That she stores my public key in an organisation-wide (Lotus
>Notes)directory so that anybody in her company can e-mail me ?
>
>Is that a correct interpretation of what you said ?

Yes, and as only she needs to be able to encrypt messages to you then
she can store the public key in her personal address book without
recourse to her system administrators.

>
>What is a "Single Notes" user ?

An individual, as in this case - though I wrote it originally as [a
single Notes user] - I didn't add the quotes.

>
>What is the other type of Lotus Notes user ?

There are no other types - certainly none you need worry about anyway.
I just meant one single user as opposed to a group.

Caliban wrote in message news:...
> acbrownus-at-yahoo.com (Alan C.Brown) wrote:
>
> >As regards # 2, you seem to be giving 2 options :
> >
> >1. That she stores my public key in her personal(Lotus Notes)address
> >book, if she is a "Single Notes" user.
> >
> >2. That she stores my public key in an organisation-wide (Lotus
> >Notes)directory so that anybody in her company can e-mail me ?
> >
> >Is that a correct interpretation of what you said ?
>
> Yes, and as only she needs to be able to encrypt messages to you then
> she can store the public key in her personal address book without
> recourse to her system administrators.
>
> >
> >What is a "Single Notes" user ?
>
> An individual, as in this case - though I wrote it originally as [a
> single Notes user] - I didn't add the quotes.
>
> >
> >What is the other type of Lotus Notes user ?
>
> There are no other types - certainly none you need worry about anyway.
> I just meant one single user as opposed to a group.

-------------
Thanks a lot. You have been a great help.

Alan C. Brown

> Caliban wrote in message news:...
> > acbrownus-at-yahoo.com (Alan C.Brown) wrote:
> >
> > >As regards # 2, you seem to be giving 2 options :
> > >
> > >1. That she stores my public key in her personal(Lotus Notes)address
> > >book, if she is a "Single Notes" user.
> > >
> > >2. That she stores my public key in an organisation-wide (Lotus
> > >Notes)directory so that anybody in her company can e-mail me ?
> > >
> > >Is that a correct interpretation of what you said ?
> >
> > Yes, and as only she needs to be able to encrypt messages to you then
> > she can store the public key in her personal address book without
> > recourse to her system administrators.
> >
> > >
> > >What is a "Single Notes" user ?
> >
> > An individual, as in this case - though I wrote it originally as [a
> > single Notes user] - I didn't add the quotes.
> >
> > >
> > >What is the other type of Lotus Notes user ?
> >
> > There are no other types - certainly none you need worry about anyway.
> > I just meant one single user as opposed to a group.
>
> -------------
> Thanks a lot. You have been a great help.
>
> Alan C. Brown
--------------

I'm back again with a few more questions.

Apart from storing the OE6 user's public key in the Lotus Notes
address book, what else does the single Lotus Notes user have to do to
configure Lotus Notes to use a Verisign Digital ID (certificate)
instead of the default Lotus Notes certificate ?

Can she configure Lotus Notes so that both her default Lotus Notes
certificate and her Verisign certificate are available at all times
for sending & receiving digitally signed & encrypted e-mail, depending
on who she is corresponding with ? That is, so both certificates would
be available at all times, and she simply selects which one to use on
an as-need basis ?

Is the ability of Lotus Notes to use X.509 certificates limited to
particular versions of Lotus Notes ?

Is there anywhere that I can get a Lotus Notes step-by-step guide for
congfiguring Lotus Notes to use digital IDs and public keys (both
default & X.509) to send and receive digitally signed and encrypted
e-mail ?
For example, along the lines of "Step-byStep guide to Public Key
features in Outlook Express 5.0 and Above" :
http://www.microsoft.com/technet/pro.../pubkeyox.mspx

Thank you

Alan C. Brown

Hello Alan,

She does not need a verisign certificate. When it is too expensive, her
admin could create an internet certificate by his own. With it you can
create your own X.509 certficates. The only disadvantage is, that the
recipient gets a message indicating, that the signature is not trusted,
because it is not signed by a well known CA. But when you say this
certificate is trusted, then you can work with it, with no extra costs!

Normally the X.509 certificates are always taken when you send email to
internet recipients. Therefore she does not have to select the certificate
when she sends the mail. She should only take care, that she sends email
in Mime format to the internet. She can set this switch in her workprofile
(Tab Mail -> Format of mail to internet adresses).

The X.509 certificates are supported in LN since R4.x (as far as I know).

HTH
Holger