Do not expose S/MIME details in unsigned unencrypted outgoing messages 
Use this IdeaSpace to post ideas about the Notes Client.

: 15
: 15
: 0
: Notes Client / Mail
: mail, mail headers, security, privacy
: Martin Becker238 04 Dec 2009
: / Email
By default, I want my notes internal mail messages signed, but I do not have or need a certificate to sign internet messages.
When I try to send an internet message, a dialog pops up asking me whether it is okay to send the message anyway, having asked to sign it while lacking a certificate. So far, so good. It is easier to hit that OK button than fiddling with delivery options each time in advance, which I'll forget anyway when in a rush.
What annoys me is that the message sent after leaving that dialog is adorned with an X-MIME-Track header shouting my notes-internal name and how S/MIME signing failed due to some certificate not having been found. But nothing failed. I chose not to sign that message after all. I would rather that unsigned unencrypted messages did not get such a header at all. Such details are not for the eyes of outside recipients.
Notes should clean outgoing internet messages of all S/MIME traces when user interaction has caused it to drop S/MIME behaviour.

No documents found


Welcome to IdeaJam

You can run IdeaJam™ in your company. It's easy to install, setup and customize. Your employees, partners and customers will immediately see results.

Use IdeaJam to:

  • Collect ideas from employees
  • Solicit feedback and suggestions from employees and customers
  • Run innovation contests and competitions
  • Validate concepts
  • Use the power of "crowd-sourcing" to rank ideas and allow the best ideas to rise to the top

IdeaJam™ works with:

  • IBM Connections
  • IBM Lotus Quickr
  • Blogs and Wikis
  • Websphere Portal
  • Microsoft Sharepoint
  • and other applications.

IdeaJam has an extensive set of widgets and API's that allow you to extend and integrate IdeaJam™ with other applications.

Learn more about IdeaJam >>

IdeaJam developed by

Elguji Software Logo