Apple-Mail set S/MIME algorithm

apple.stackexchange https://apple.stackexchange.com/questions/214534

  •  15-02-2021
  •  | 
  •  

Question

Apple-Mail uses DES-EDE3-CBC and SHA1 for new S/MIME-messages. Nowadays, both algorithms are considered as VERY WEAK and probably crackable by security agencies ore even large botnets. Is it somehow possible to force Apple Mail to use something more secure like AES-CBC and SHA2?

Was it helpful?

Solution

There appears to be no public default or setting to adjust the algorithm used by Mail – at least as of OS X 10.11.

Augment or Switch Your Mail Client

Consider using a third party tool like gpgtools to augment your e-mail security:

GPG for Mail is an open source plugin for Apple Mail. Encrypt, decrypt, sign and verify mails using OpenPGP with a few simple clicks.

Alternatively, consider switching to another e-mail client that better addresses your security concerns.

Tell Apple

Be sure to provide feedback about your concerns directly to Apple via Mail feedback. Every report helps justify the engineering time.

You may also find the CSDA mailing list useful for reaching the involved Apple engineers.

Licensed under: CC-BY-SA with attribution
Not affiliated with apple.stackexchange
scroll top