jamesd at echeque.com writes: >My impression is that S/MIME sucks big ones, because it commits one to a >certificate system based on verisign or equivalent. I'll say this one more time, slowly for those at the back: What you're criticising is PEM circa 1991, not S/MIME. Things have moved on a bit since then. Peter.