Displaying a signed message in Webmail

I was recently intrigued by Post Office messages with a special sign at the beginning of the title, a sign that disappears when you open the message.

It looks like an edit button, but it’s not!

This flag is to show that the message is signed by the sender.

20240913-115904.png

This is how it looks with the same message displayed by Thunderbird.

20240913-114458.png

At the top right corner we have an indicator [S/MIME ] and if we click on it we can display the content which specifies that the message is signed with the details to verify the signature.

On the other hand, it’s impossible to get more information in Webmail, you have to guess. I don’t know how it will display if the message was edited after it was signed.

DanielD

Show original language (French)
    a month later

    @“x ”#219253and @Black Mamba

    don’t forget one thing, if the IT department is OK with security, the marketing people give the impression of being pretty illiterate on the subject.

    a few examples of blunders:

    • a single login for all services
    • inviting customers to click on the billing email to log in
    • as an example for the new Webmail, a medical e-mail
    • the Microsoft 365 advert on Facebook… and yes, because data protection is IT security, and the Commission Nationale de l’Informatique et des Libertés won’t tell me otherwise: www.cnil.fr/sites/cnil/files/2024-03/cnil_guide_securite_personnelle_2024.pdf
    Show original language (French)
     changed by merinos

    @DanielD

    but who told you that I was targeting a particular audience?

    and don’t forget, as you seem to do, that the main player in computer security is between the chair (or the floor) and the keyboard (or the touch screen) of Mr. and Mrs. everyone.

    put differently, you can put all the hardware and software protections you want, if homo sapiens behaves like an idiot, well, one day or another, the system will be corrupted.

    Show original language (French)

    speaking of a nice piece of cybersecurity (the S/MIME certificate for emails) from the IT department, another little thing to know: [www.swisscom.ch/.well-known/security.txt](https://www .swisscom.ch/.well-known/security.txt)

    Show original language (French)
    4 days later

    for our friends in marketing…

    Note that Google* and Microsoft (with their Webmail) offer S/MIME:

    ***** depending on the version used.

    and I’ve just discovered a free basic service: www.actalis.com/s-mime-certificates

    Show original language (French)
     changed by merinos

    Hello @merinos,

    Thank you for your interventions and for sharing interesting information. However, it seems to me that your recent comments stray a little from the main subject of this discussion, which specifically concerns the display of signed messages in Webmail.

    If you want to discuss more general topics on cybersecurity or marketing practices, don’t hesitate to create a new dedicated discussion. This will help keep this conversation clear and focused for those looking for answers on Webmail and S/MIME.

    Thank you for your understanding!

    Cordialement,
    Doremi

    Show original language (French)

    Hi @Doremi

    apart from the Swisscom Computer Security Incident Response Team’s special page, all of my messages are related to the display of a digital signature in Webmail.

    But it’s true that on this occasion I’m addressing more the people in charge of marketing the products than the operator’s traditional customers.

    And as for the encryption of emails themselves, I’ve already written several lines: www.libellules.net/forum/trucs-et-astuces/le-chiffrement-de-ses-petits-courriels

    Show original language (French)
     changed by merinos
    2 months later