Re: Non-repudiation for Message Disposition Notifications

[Karen Rosenthal <karenr@xxxxxxxxxxxx>]

Chuck Shih wrote:

> 
> A question for you: On the receiving end can you get access to
> the message id? You will need to get access to this in order to
> send it back in the signed receipt.

I don't believe we can through Simple MAPI.  I presume we can through
Extended MAPI.  But my real concern is our lack of control over the
mailers/ mail gateways.  Our application does not assign a Message-ID,
it is left for each mailer to assign.  We've not tried assigning our own
Message-ID, but I would doubt that all mailers would leave it intact.  
Thus, our application does not have access to the Message-ID assigned. 
How is an originating application supposed to get the sent Message-ID?

We've also noted that both MS Exchange and Connect2 remove the
'Content-ID:' in our headers.  Has anyone tested to see if these mailers
leave the 'Disposition-notification-to:' intact?  (Same question for the
content-md5)?


> 3. The request for mdn is part of the RFC822 header and not part of
>    the PKCS#7 envelope. AS#1 specifies that if you have a MIME
>    multipart, that you sign across the multipart and make this
>    MIME multipart the DATA portion of the S/MIME signedData
>    content. Does this make sense? There is no provision to
>    acknowledgement individual content within a multipart content.

Any anticipated standard for receipts at the bodypart level?  There is
demand in the user community for signing specific bodyparts, thus we
should probably anticipate the need for bodypart level receipts.
 
> 4. I'm not sure what you mean if S/MIME Version 1 is acceptable.
>    The AS#1 really defines applicability of S/MIME based on Version 2.
>    Not everything in Version 2 needs to be implemented for
>    Internet EDI. Is there something specifically that you
>    have in Version 1 that is not in Version 2
> 

No, nothing in Version 1 that is missing in Version 2.  Just trying to
determine when Version 2 will be required.

> 
> 



-- 
Name:	Karen Rosenthal
E-mail:	karenr@premenos.com
Phone:	(510)688-2928
Fax:	(510)602-2133