On Sep 6, 2013, at 2:51 PM, Phillip Hallam-Baker <hallam@xxxxxxxxx> wrote: > The issue is that smime email clients are more common so I would > rather teach the smime doggie pgp like tricks than vice versa The problem is getting your smime program to stop using CA keys and only use your local key as a CA key. And someone would have to code up something to do all the certs. It's not a bad idea in theory though, if it can be made to work.