Site Tools


secure-email

This is an old revision of the document!


Secure Email

   Email is prone to disclosure of information. Most emails are currently transmitted in the plaintext (not encrypted). By means of some available tools, persons other than the designated recipients can read the email contents. Email encryption has been used by journalists and regular users to protect privacy.

   Features

       1. What is Secure Email?

       Secure Email refers that sender encrypt the message with the recipient's digital certificate on condition that both of them have e-mail digital certificate.        So that email on the internet will not be stolen during transmission and only the recipient can read encrypted mail. Even if the messages are retained or the sender sent the wrong message, others can not see the content of the message, which ensures the security of communication between users.         It's an end to end secure email technology and ensures that the email content can not be modified in the entire process from being sent to being received.

      Now, PGP and S / MIME are two proven end to end secure e-mail standards.

       2. Pretty Good Privacy (PGP)

       Pretty Good Privacy (PGP) is a data encryption and decryption computer program that provides cryptographic privacy and authentication for data communication. PGP is often used for signing, encrypting, and decrypting texts, e-mails, files, directories, and whole disk partitions and to increase the security of e-mail communications.

       PGP and similar software follow the OpenPGP standard (RFC 4880) for encrypting and decrypting data.

   Preparation

       HardWare:

       SoftWare:

   Usage

       1.The Enigmail Installation and usage

      Enigmail is a seamlessly integrated security add-on for Mozilla Thunderbird. It allows you to use OpenPGP to encrypt and digitally sign your emails and to decrypt and verify messages you receive.   Enigmail is free and simple interface for OpenPGP email security . It can be freely used, modified and distributed under the terms of the Mozilla Public License.

       Click here to know more details.

       2. The Key Management of Enigmail

       Once you have Enigmail and GnuPG on your system, you need to populate it with keys: it's pretty useless without them. You need to have your own key pair in order to sign messages and allow anybody to send encrypted messages to you. Furthermore, you will need the public key of a person in order to send that person an encrypted message, or to verify the signature in a message sent by that person.         Note: Enigmail using gpg tool  of gpg2.exe program  to encrypt or decrypt message, you can find it from “.\Program Files\GNU\GnuPG\pub\ ”.

       Click here to know more details.

       3.Combine SmartCard with Enigmailto come into secure e-mail.

       Generally, support for OpenPGP encryption and signing message is provided by Enigmail, and in here, You can using OpenPGP encryption and signing message with SmartCard.

        Click here to know more details.

   Discussion

    Go to JavaCardOS Forum

secure-email.1494832358.txt.gz · Last modified: 2017/05/15 07:12 by UNKNwYSHSA