Ok, so you want your email to be nice and secure... Get a personal certificate!

This won't cover all the history or anything like that so if you're interested take a look at the wikipedia page: http://en.wikipedia.org/wiki/S/MIME

The first step is to get a certificate. I will discuss how to get and use one from thawte.com, linked below. This certificate will certify that an email's sender is in fact an email account's owner. This may not sound like much but its a big step in the secure direction! Any email you send that is signed will alert a recipient if the email has been tampered with since you pressed the send button. This doesn't prevent people from reading your email but they at least cannot change the content.

If you exchange emails with other individuals who have a Certificate you can encrypt the email which will allow you to not only ensure the email has not been tampered with but has not been viewed by anyone along the way unless they can break the encryption.

You can go a step further and guarantee that not only did the email accounts owner send this email, but also, the email accounts owner is . This is pretty cool! It adds a little personality to you email and assures your recipients that you as a person are really sending all those email's they are getting.

To do this you have to prove to Thawte that you are in fact a person who owns this email account by getting 50 assurance points from their Thawte Notaries. These notaries are all over the place and you can probably find them right around where you live. Different notaries can give you a different amount of points so if you plan your cards right you should only have to present you information to two notaries in order to get this higher level of Personal Certificate. More information on this is available after you create your account at thawte.com

Just a small correction: I had to do the concat the other way around: cat mail.domain.com.crt ca-bundle.crt > super-bundle.crt

Otherwise I will get a key mismatch error and nginx won't start. Seems to me that the first cert is used when comparing with the key.

Anyway, thank you again for you fast response that was dead on target. :)

-Riku Räisänen

Igor Sysoev kirjoitti 17.8.2007 kello 11:03:

sudo port install postgresql83-server

export PATH=/opt/local/lib/postgresql83/bin:$PATH

sudo mkdir -p /opt/local/var/db/postgresql83/defaultdb

sudo chown postgres:postgres /opt/local/var/db/postgresql83/defaultdb

sudo su postgres -c '/opt/local/lib/postgresql83/bin/initdb -D /opt/local/var/db/postgresql83/defaultdb'

sudo launchctl load -w /Library/LaunchDaemons/org.macports.postgresql83-server.plist

sudo su postgres -c "createuser -s `whoami`"