From 43a97878ce14b72f0981164f87f2e35e14151312 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 11:22:09 +0200 Subject: Adding upstream version 110.0.1. Signed-off-by: Daniel Baumann --- .../chrome/common/help/mailnews_security.xhtml | 463 +++++++++++++++++++++ 1 file changed, 463 insertions(+) create mode 100644 l10n-cs/suite/chrome/common/help/mailnews_security.xhtml (limited to 'l10n-cs/suite/chrome/common/help/mailnews_security.xhtml') diff --git a/l10n-cs/suite/chrome/common/help/mailnews_security.xhtml b/l10n-cs/suite/chrome/common/help/mailnews_security.xhtml new file mode 100644 index 0000000000..86781bbb24 --- /dev/null +++ b/l10n-cs/suite/chrome/common/help/mailnews_security.xhtml @@ -0,0 +1,463 @@ + + + + + + %brandDTD; +]> + + + +Signing & Encrypting Messages + + + + +

Signing & Encrypting Messages

+ +

In this section: +

About Digital + Signatures & Encryption
Getting Other + People's Certificates
Configuring Security + Settings
Signing & + Encrypting a New Message
Reading Signed & + Encrypted Messages
Message Security - + Compose Window
Message Security - + Received Message

+ +

About Digital Signatures & + Encryption

+ +

When you compose a mail message, you can choose to attach your digital + signature to it. A digital + signature allows recipients of the message to verify that the message + really comes from you and hasn't been tampered with since you sent + it.

+ +

When you compose a mail message, you can also choose to encrypt it. + Encryption makes it very difficult + for anyone other than the intended recipient to read the message while it is + in transit over the Internet.

+ +

Signing and encryption are not available for newsgroup messages.

+ +

Before you can sign or encrypt a message, you must take these preliminary + steps:

+ +

Obtain one or more certificates + (the digital equivalents of ID cards). For details, see + Getting Your + Own Certificate.
Configure the security settings for your email account. For details, see + Configuring Your + Security Settings. +

+ +

Once you have completed these steps, you can complete the instructions in + Signing & Encrypting a + New Message.

+ +

The sections that follow provide a brief overview of how digital signatures + and encryption work. For more technical details on this subject, see the + online document + Introduction + to Public-Key Cryptography.

+ +

How Digital Signatures Work

+ +

A digital signature is a special code, unique to each message, created by + means of public-key + cryptography.

+ +

A digital signature is completely different from a handwritten signature, + although it can sometimes be used for similar legal purposes, such as signing + a contract.

+ +

To create a digital signature for an email message that you are sending, you + need two things:

+ +

A signing certificate + that identifies you for this purpose. Every time you sign a message, your + signing certificate is included with the message. The certificate includes + a public key. The presence of the + certificate in the message permits the recipient to verify your digital + signature. + +
Your certificate is a bit like your name and phone number in the + phonebook—it is public information that helps other people + communicate with you.
+
A private key, which is created + and stored on your computer when you first obtain a certificate. + +
Your private key for a signing certificate is protected by your + Master Password, and the + &brandShortName; program does not disclose it to anyone else. The Mail + & Newsgroup software uses your private key to create a unique, + verifiable digital signature for every message you choose to sign.
+

+ +

How Encryption Works

+ +

To encrypt an email message, you must have an + encryption certificate + for each of the message's recipients. The public key in each certificate + is used to encrypt the message for that recipient.

+ +

If you don't have a certificate for even a single recipient, the + message cannot be encrypted.

+ +

The recipient's software uses the recipient's private key, which + remains on that person's computer, to decrypt the message.

+ +

[Return to beginning of + section]

+ +

Getting Other People's + Certificates

+ +

Every time you send a digitally signed message, your encryption certificate + is automatically included with the message. Therefore, one of the easiest + ways to obtain someone else's certificate is for that person to send you + a digitally signed message.

+ +

When you receive such a message, the person's certificate is + automatically stored by the Certificate + Manager, which is the part of the browser that keeps track of + certificates. This is useful because you need to have a certificate for each + recipient of any email message that you want to send in encrypted form.

+ +

Another way to obtain certificates is to look them up in a public directory, + such as the phonebook directories maintained by many companies.

+ +

It's also possible to look up certificates automatically. This feature + is controlled by + Mail & + Newsgroups Preferences - Addressing or + Mail & Newsgroups + Account Settings - Addressing, which can be configured to look up + recipients' email addresses in a directory.

+ +

When you are using any account that is configured to look up addresses in a + directory, the same directory will be searched for matching certificates when + you attempt to send an encrypted message to one or more recipients for whom + you don't have certificates on file.

+ +

The directory will also be searched for missing certificates when you open + the drop-down menu below the Security icon in the Compose window and choose + View Security Info.

+ +

[Return to beginning of + section]

+ +

Configuring Security Settings

+ +

Once you have obtained an email certificate (or certificates), you must + specify the certificates you want to use for signing and encrypting + messages.

+ +

For information about obtaining email certificates, see + Getting Your + Own Certificate.

+ +

To specify which signing and encryption certificates to use with a + particular account, begin from the Mail window:

+ +

Open the Edit menu and choose Mail & Newsgroups Account Settings.
Click Security under the name of the mail account whose security settings + you want to configure.
Under Digital Signing, click Select. (You may be asked to provide your + Master Password before you can + proceed further.) + +
A dialog box appears that allows you to select from among your available + signing certificates.
+
Choose the signing certificate you want to use, then click OK.
Follow the same steps under Encryption: click the Select button, select + the encryption certificate you want to use, and click OK.

In some cases you may be able to specify the same certificate under + Encryption that you specified under Digital Signing; check with your system + administrator to find out for sure.

+ +

Optionally, you can also indicate that you normally want to sign or encrypt + all messages sent from a particular account. These account-specific settings + are for convenience only; you can override the default settings for + individual messages.

+ +

To configure your default signing and encryption settings, start from the + Security panel for the account (described above) and select your settings as + follows:

+ +

Under Digital Signing: +
- Digitally sign messages: When this checkbox is + selected, all the messages you send from this account will be digitally + signed unless you indicate otherwise before you send the message. To + turn off this default setting, deselect the checkbox.
+
Under Encryption (choose one): +
- Never: When this option is selected, messages you + send from this account will be not be encrypted unless you indicate + otherwise before you send them.
- Required: When this option is selected, all the + messages you send from this account will be encrypted—but only if + you have valid certificates for each of the message's recipients. + If you don't have all the necessary certificates, the message + can't be sent unless you turn off encryption for that message.
+

+ +

When you have finished configuring your mail security settings, click OK to + confirm them.

+ +

[Return to beginning of + section]

+ +

Signing & Encrypting a New + Message

+ +

Before you can digitally sign or encrypt any message, you must obtain at + least one email certificate and configure your mail security settings + correctly. For background information on these tasks, see + About Digital Signatures + & Encryption.

+ +

The settings specified in + Mail & Newsgroups + Account Settings - Security determine the default settings for each new + Compose window you open when you set out to write an email.

+ +

To open a Compose window, start from the Mail window and click Compose. You + can immediately identify the default security settings from the presence or + absence of these icons near the lower-right corner of the window:

+ + + + + + + + +

	The message will be digitally + signed (assuming you have a valid email certificate that + identifies you).
	The message will be encrypted + (assuming you have valid certificates for all recipients).

+ +

To turn these settings off or on, click the arrow just below the Security + icon in the Mail toolbar near the top of the window. Then select the item you + want from the drop-down list:

+ +

Do Not Encrypt This Message: Choose this to turn off + encryption for this message. The message will not be encrypted when it is + sent over the Internet.
Encrypt This Message: Choose this to turn on encryption + for this message. The message will be sent in encrypted form. However, it + can't be sent unless you have valid certificates for all + recipients.
Digitally Sign This Message: Choose this to turn digital + signing on or off for this message. A checkmark indicates the message will + be signed.
View Security Info: Choose this to view detailed + information about the security status of this message—to help you + determine, for example, whether you need to obtain a certificate for one of + the recipients.

+ +

To view detailed information about the message's security status, you + can also click the key or lock icon as described in + Message Security - Compose + Window.

+ +

[Return to beginning of + section]

+ +

Reading Signed & Encrypted + Messages

+ +

When you view a signed or encrypted message in the Mail window, these icons + near the upper-right corner of the message header indicate the security + status of the message:

+ + + + + + + + + + + +

	The message is digitally + signed and has been validated. If there is a problem with the signature, + the pen is broken.
	The message is signed, but it has a + large attachment that has not yet been downloaded from the IMAP server. + As a result, the signature cannot be validated. Click the icon to + download the attachment and validate the signature.
	The message is encrypted. If there + is a problem with the encryption, the key is broken.

+ +

For information about certificate validation, see + Controlling + Validation.

+ +

To see more detailed information about the message's security, click + the key or lock icon, or follow the instructions in + Message Security - Received + Message.

+ +

[Return to beginning of + section]

+ +

Message Security - Compose Window

+ +

This section describes the Message Security window that you can open for any + message you are composing. If you're not already viewing Message + Security, click the Security icon in the toolbar of the Compose window.

+ +

The Message Security window describes how your message will be sent:

+ +

Digitally Signed: This line describes whether your + message will be signed. There are three possibilities: +
- Yes: Digital signing has been enabled for this + message, you have a valid certificate identifying you, and the message + can be signed.
- No: Digital signing has been disabled for this + message.
- Not possible: Digital signing has been enabled for + this message. However, a valid + certificate identifying you + for this purpose is not available, or there is some other problem that + makes signing impossible.
+
Encrypted: This line describes whether your message will + be encrypted. There are three possibilities: +
- Yes: Encryption has been enabled for this message, + valid certificates for all listed recipients are available, and the + message can be encrypted.
- No: Encryption has been disabled or is not possible + for this message.
- Not possible: Encryption has been enabled for this + message. However, a valid certificate for at least one of the listed + recipients is not available, or no recipients are listed, or there is + some other problem that makes encryption impossible.
+

+ +

When you compose a message and select a different account, the signing + and encryption preferences are updated to reflect the settings of + the newly selected account.

+ +

The Message Security window also lists the certificates available for the + recipients of your message:

+ +

View: To view the details for any certificate in the + list, select its name, then click View.

+ +

For more information about obtaining certificates and configuring message + security settings, see Signing + & Encrypting Messages.

+ +

To indicate your signing or encryption choices for an individual message, + click the arrow beside the Security button in the Compose window, then select + the options you want.

+ +

To indicate your default signing and encryption preferences for all + messages, see Mail & + Newsgroups Account Settings - Security

+ +

[Return to beginning of + section]

+ +

Message Security - Received + Message

+ +

This section describes the Message Security window that you can open for any + message you have received. If you're not already viewing Message + Security for a received message, follow these steps:

+ +

In the Mail window, select the message for which you want to view + security information.
Open the View menu and choose Message Security Info.

+ +

The Message Security window displays the following information:

+ +

Digital Signature: The top section describes whether the + message is digitally signed and if so, whether the signature is valid.

If validation failed while OCSP was enabled, check the OCSP settings in + Privacy + & Security Preferences - Certificates. If you are not familiar with + OCSP, confirm the settings with your system administrator. If your settings + are correct, there may be a problem with the OCSP service or the + certificate used to create the signature is no longer valid.

If the signature is invalid because of a problem with a certificate's + trust settings, you can use the Certificate + Manager to view or edit those settings.

View Signature Certificate: If the message is signed, + click this button to view the certificate that was used to sign it.
Encryption: The bottom section reports whether the + message is encrypted and any decrypting problems. +
- If the message's contents have been altered during transit, you + should ask the sender to resend it. The changes may have been caused by + network problems.
- If a copy of your own certificate (used by the sender to encrypt the + message) is not available on your computer, the private key required to + decrypt the message cannot be retrieved. The only solution is to import + a backup copy of your certificate and its private key (see + Your Certificates for + details.) If you don't have access to a backup certificate, you + will not be able to decrypt the message.
+

+ +

[Return to beginning of + section]

+ + + -- cgit v1.2.3