-- James A. Donald:

...

Outlook and outlook express support digital signing and encryption -- but one must first get a certificate.

Now what I want is a certificate that merely asserts that the holder of the certificate can receive email at such and such an address, and that only one such certificate has been issued for that address. Such a certification system has very low costs for issuer and recipient, and because it is a nym certificate, no loss of privacy.

Dave Howe

then generate one. it won't be accepted as legitimate by the majority of clients though

That scarcely matters. Almost no one uses PKI client certificates. All client certificates in actual use are rejected by default, and one always has to explicitly tell the client to accept. --digsig James A. Donald 6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG KkjE3D30eoM+hwpAF+AM2EZj/DxNiCTm2v0ALwuy 4UbHmZOBy/WI0yibAaB4UHUypY1guhHUSbQ/cFNPO