Re: [Evolution] Evolution/GPG

[Pete Biggs <pete biggs org uk>]

> the "Microsoft Infrastructure" uses S/MIME by default, which sends
> certificates.

Yes - S/MIME works by a "Trusted Third Party" issuing signed Email
Certificates. The only verification done by someone like Comodo when
they issue personal certificates is that the certificate is sent to the
email address specified.  The advantage of S/MIME is that you do not
need to have verified knowledge of the sender's public key in order to
verify the email - the public key is sent with the message and you
trust the party that signed the key that it belongs to the person you
think it does.  The disadvantage is that you put all your trust into a
third party - it is not unknown for the signing keys from these
"trusted" bodies to go astray and to be abused or that someone has
managed to acquire a signed key for a random email address.

P.