Management of PEM public key certificates using X.500 directory service: Some problems and solutions

摘要

Internet Privacy Enhanced Mail (PEM) provides security services to users of Internet electronic mail. While the prevalent PEM implementation uses a public key certificate-based strategy, certificates are mostly distributed vie e-mail exchanges, which raises several security and performance issues. This paper discusses some problems with this strategy, explores the relevant issues, and develops an approach to address them.