Encrypt mail with multiple certificate

[nathinthesky]

hello,

more a question for a new feature than an issue. Is it planned to implement encrypted mail for multiple recipients ?

Thanks !

[bbottema]

My knowledge on this is limited, but I think it should already work with multiple recipients, if their keys were signed with a shared CA certificate. Or something like that.

[nathinthesky]

Sorry for delay to answer.
To encrypt mail for multiple recipients, you have to encrypt it with each recipient certificate (public key), then, they will be able to decrypt the mail on their side with their private key.
I'll will try to work with you on this !

[bbottema]

At one of the companies I worked, they configured a single (CA?) cert, which was used to sign (encrypt?) all emails without needing recipients individual public keys. Is your use case actually really a common one? Seems like a hassle!

[nathinthesky]

I think my case is a common one.

Usually, a company has its own CA, they use it to sign internal certificates. Each employee then has a key pair (private and public key).

Let's say I want to send an encrypted mail to Alice and I want her to be the only one to be able to decrypt it. I encrypt it with her public key. The only person able to decrypt the sent mail is the one with the corresponding private key (=Alice).

Now, I want to send an encrypted mail to Alice and Bob (at the same time, = multiple recipients). If I encrypt it only with Alice public key, only Alice will be able to read it. Bob can't. That's why I need to encrypt it twice : one time with Alice's public key, one time with Bob's one.

Right now, if I want to do that with simple-java-mail, I have to send 2 distincts emails instead of one.

I don't know the company you're talking about but if you use only one certificate (you usually don't use a CA for that) to encrypt each email, that means, everybody share the private key and everybody can decrypt them.

The same if everybody use the same key to sign each email, you can't be sure of who really send it. Usually, you sign it with your private key.

But maybe that's what they intended to do...

By the way, in the lib, sign case is ok because you always sign a mail once (= with one private key).

[bbottema]

By the way, in the lib, sign case is ok because you always sign a mail once (= with one private key).

Ahh then that might have been the case at the company I worked for at the time.

You made a convincing case, one question: this change would mean being able to sign on a per-email basis (so using EmailBuilder). Would it ever make sense to be able to do it on Mailer level as well, affecting all emails that don't have their own key added for signing/encrypting?

[nathinthesky]

you mean to encrypt on a per-email basis ?

Not sure to understand your question: "do it on Mailer level... emails that don't have their own key added for signing/encrypting"

As encryption is for a specific recipient, I think certificates has to be done explicitely set in emailBuilder (no default value). For signing, it can be configured as default (as you can choose to sign all your email).

[bbottema]

I think certificates has to be done explicitely set in emailBuilder (no default value)

So no use case whatsoever to allow a default. Ever. (just double checking)