Dear Hank, I did try to test Eudora on windows, but at the time I could not get it to receive any mails at all. I think maybe I had too many mail clients installed at that point. I will come back to this one shortly and try again. Regards Denis Walker Software Engineering Department RIPE NCC Hank Nussbacher wrote:

On Thu, 8 Jan 2004, Mally Mclane wrote:

Very strange that Eudora came in 5th in Appendix B1.1 and 4th according to B1.2 but didn't warrant a test vs. Lotus, Mozilla, The Bat, and Mulberry that came out below Eudora but did warrant a test.

Stranger is that section 7 shows that Eudora was tested but in section 4 I can't find any Eudora results.

-Hank

...

Hi Denis,

--On 08 January 2004 17:46 +0100 Denis Walker <denis@ripe.net> wrote:

...

The results of this study can be found on our web site at:

http://www.ripe.net/ripencc/pub- services/db/mail_client_tests.html

It seems you didn't test Microsoft Outlook, just Outlook Express? As these are two very different products, was there a reason for this, just I would have thought Microsoft Outlook would have been very widely used...

Rgds,

Mally Mclane JANET-CERT

Dear Grzegorz, In total I spent about four weeks doing the research on mail clients, installing and configuring them, testing them and preparing the report. But this was spread over a slightly longer period. The implementation including preparing detailed design documents, code changes, writing new test cases for our comprehensive regression testing of dbupdate and running the tests will take a similar amount of time. The time to implement this feature is independent of the report. The reason we spent the time on the report is to address the concerns of some members who wanted to know how widespread the use of this technology is. We would also like to point out that this is not a 'static' document. There are many other mail clients used by some members. It is not practical for the RIPE NCC to test them all. The actual tests are quite quick, but the time consuming part is installing and configuring them. Our first aim was to test some of the most commonly used clients, then secondly to ensure that there was at least a choice of mail clients available on each of the three platforms we used. This second point is why we did not just take the 'top ten' mail clients from the list. But we are hoping that some members will do further testing on other mail clients and feed the results back to the RIPE NCC and we will update the document. Perhaps along with the results some details of any installation options and configuration details needed to enable S/MIME can also be included. Regards, -- Denis Walker Software Engineering Department RIPE NCC Grzegorz BRZESKI wrote:

...

At the RIPE 45 Meeting a proposal was presented to implement an additional

form

...

of strong authentication for protecting objects in the RIPE Database and

to

...

allow for secure communication by e-mail with the RIPE NCC. This

implementation

...

uses the X.509 certificates. A question was raised by some members about

how

...

widespread is the compliance of S/MIME within mail clients. The RIPE NCC Software Engineering Department has undertaken a study to evaluate the use

of

...

S/MIME by mail clients.

Just a quick question, how many man hours did it take to get this study done and compile the report ? How much time would it take on the other hand to implement this _additional_ form of strong authentication without the report ?

Regards,

-- Grzegorz BRZESKI