As mentioned previously, they would send the user a digitally signed message, which would contain their key. Once the sender and recipients have each other's keys, they can send encrypted mail. INTERNALLY, user keys can be stored in Active Directory, so sending a message to a coworker can be encrypted without the sharing of keys first.
Pat RichardMVP Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.
You are right Sniper. I got mixed up with signing as opposed to encrypting. I mixed up when the keys are used.
My method I said is used to sign emails. I mean everyone has access to the public key via the PKI so if you allowed decryption with this key anyone can decrypt it lol.
Just for my understanding, if he wanted to sign emails only then it would be only him that needed a public cert is installed. Nothing would need to be done at the remote sites?
This would be because the public key would be availble to remote sites to verify the sender.
Take a look at my IT blog guides, knowledgebase and technical resources at
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.