Hacker News new | ask | show | jobs
by p2detar 436 days ago
It did, but on enterprise level. S/MIME uses the CA hierarchical trust model, which is centrally managed and much more compatible with how internal enterprise structures are built. In a large enterprise you would have IT managing your AD/CS and therefore also managing the issuing, revocation and so on of employee certificates. But for the public this model of management isn't really practical.
1 comments

I've worked in an org that used S/MIME heavily.

In a managed environment, you also get the advantage of certificates stored in a central directory (LDAP etc), and so certificate selection for the client is seamless.

All you have to do is hit "encrypt" in your mail client, enter your smart card PIN and the machine does the rest.