said Leslie Turriff:
| This drove me mad for ages, until I finally broke down and started | tinkering with the Settings. (I don't know if this is the best way to | fix this, but I figure that when an ISP sends certificates with broken | authority info, which apparently is ignored by all those Windoze mail | clients, it must be more or less okay...) | In the Scurity & Privacy Settings, S/MIME Validation tab, I unchecked | "Do not check certificate policies" and "Never consult a CRL", and now | kMail doesn't gripe about this any more.
not the safest thing to do, but preferable to insanity -- thanks!