Download MeSign APP, use it freely to realize the automatic email encryption and digital signatureAuto-configure S/MIME email certificate

1. The status and problems of email encryptionFree Download MeSign App

Email is a must for life and work, but email is a "postcard", which is transmitted in cleartext, which is very insecure and must be encrypted. At present, to realize email encryption, you need to use email client software that supports S/MIME certificate encryption, such as Outlook and Thunderbird, and you must apply and buy email certificate from a CA. After you get the email certificate, you need to configure it in the mail client. Send a signed email to the recipient to exchange the public key. After both parties have an email certificate and successfully exchange the public key, the two parties can send encrypted email.

This email encryption process is very cumbersome and very complicated, this makes a very good email encryption technology-S/MIME has not been popularized and applied, which directly led to the first important application of the Internet-email is still transmitted in cleartext for 50 years after it was invented! The second important application of the Internet-http, is also a cleartext transmission at the beginning, but now it has basically completed the upgrade of https encrypted transmission!

Let us return to the origin of email encryption requirement. What you need is to encrypt emails to protect privacy and business secrets, not an email certificate. It is like you need bread instead of wheat or flour. You need an email client to encrypt and decrypt emails, and a email client that can send encrypted emails like cleartext emails. This email client is our core product - MeSign APP, which automatically apply, install and configure the email certificate, and automatically uses the certificate to realize email encryption and digital signature.

2. MeSign Technology Email Encryption Solution

Email encryption requires an email certificate, so there are many CAs around the world that sell S/MIME email certificate, and there are also multiple email client that support S/MIME email certificate encryption, but the whole process is too complicated, certificate application and certificate usage is done by two different manufacturers, each of which is only responsible for their own work that fail to achieve seamless connection and improve user experience.

To realize email encryption, you not only need to download and install a free or paid email client software, but also apply for and spend money to buy an email certificate from the CA. Now, MeSign Technology directly provides you with a completely free email client software, and automatically configures the S/MIME email certificate for you for free. You do not need to exchange public keys for the recipients in advance. You can use MeSign APP like other email client sends encrypted emails directly like sending cleartext emails. All you need to do is to download and install MeSign APP, enter your email account and password to log in to your email. Email encryption is that simple, and it is free!

In short, what you need is email encryption, not email certificate! To send encrypted emails, you only need to click "Compose" in MeSign APP, fill in the recipient's email address, and you can easily send encrypted and digitally signed emails to him/her! It is that simple! And MeSign APP provides exclusive email time stamp service, so that the sent time of each email is trusted.

3. How does MeSign Technology realize automatic email encryption?

The problem of email leak and fraudulent emails had harmed many email users worldwide, and it is continuing every day. This Internet security hazard must be resolved as soon as possible! In fact, this problem can be completely solved by email encryption and digital signature technology. It is to use S/MIME standard to encrypt each email with an email certificate to eliminate email leak, and to digitally sign each email with an email certificate, so that not only guarantees the content of the email will not be tampered with illegally, and it can ensure that the email address of the sender cannot be forged, and can clearly display the authentic identity information of the email sender, so that the user can identify whether it is a fake identity email at a glance, thereby completely solving counterfeiting email fraud problem.

But why has such a good technology not been widely used to solve the problem of email fraud and email leak? Because the threshold for using S/MIME technology is too high, not only the user's email client software is required to support S/MIME standards, but also the user is required to apply for a S/MIME email certificate from a CA, and the user is required to install the email certificate to all devices, and the email certificate can be configured correctly, and know how to send digitally signed email and encrypted email. That is to say, to realize the use of email encryption and the use of email digital signature technology to solve the problem of email leak and email fraud is definitely a time-consuming, laborious and costly hard work that ordinary users cannot complete.

MeSign R&D team start to research on how to make S/MIME signature and encryption easy to be used as early as 2015. In order to ensure that users can send encrypted and signed emails just like sending cleartext emails, but also to facilitate users to use any device to send encrypted and signed emails anytime, anywhere, without having to spend time and effort to apply for email certificates or import already-applied email certificates. The problem of automatic certificate application and automatic configuration must be solved.

MeSign’s solution is to split the one S/MIME email certificate into two certificates (one signing certificate and one encrypting certificate). The encrypting certificate private key is generated, securely encrypted, and hosted in MeSign Cryptography Infrastructure (MCI). After the user has been validated the email account, the encrypting certificate key can be auto-retrieved from the cloud MCI and used for decrypting the emails automatically, so that the user does not need to applying for the certificate and importing the certificate manually, which perfectly realize the email encryption and decryption automatically. The signing certificate has the user's identity information, so the user's signing behavior has legal effect. Therefore, the signing certificate key is generated on user’s local device and securely stores the key on the local device only. This is why the serial numbers of the user’s signing certificates from the different devices are different.

MeSign Technology splits a traditional email certificate into two certificates and adopts different key management methods according to the two different key usage of signature and encryption, which perfectly solves the ease of use of the S/MIME email encryption. At the same time, it inherits the characteristics of non-counterfeiting, non-forgery, and non-repudiation of S/MIME email signatures, which makes S/MIME email encryption and signature technology truly seamless and can be used without any cryptography knowledge. Users do not need to care about how to apply for an email certificate and how to use the certificate, just write the email as usual and click send that it will be automatically sent an encrypted and signed email, automatically bind a digital identity to each email, and effectively solve the problem of email fraud and email leak.

MeSign Technology has finally overcome all the difficulties of email signature and email encryption taking for more than 4 years. We have built a secure and reliable cryptography infrastructure, and we share these facilities with all MeSign users worldwide, so that everyone can implement S/MIME email signature and encryption, meet all compliance requirements and solve the problem of email fraud without investing on these expensive facilities.

As shown on the below figure, MeSign Cryptographic Infrastructure consists of seven service systems: MeSign Certificate Authority (MCA), MeSign Cryptographic Key Management System (MKM), MeSign Public Key Exchange System (PKE), MeSign Certificate Revocation Status System (MCR), MeSign Identity Validation System (MVS), MeSign Timestamp Service System (MTS), MeSign Digital Signature Service System (DSS). These service systems in cloud work together with MeSign APP (email client APP) to constitute the "Cloud" and the "Client" collaboration system to provide the secure and reliable email encryption service and email signature service automatically for worldwide users. In other words, MeSign APP is not a traditional independent email client software, it is a user-oriented service agent which not only let users handle their own data locally to protect privacy, but also let users utilize the powerful cloud service for automatic email encryption and automatic email signature.

In other words, the reason why MeSign APP can fully automate email encryption and signature is that MeSign completely solve the cumbersome certificate application and usage issues. It makes users can obtain email certificate for sending encrypted and signed emails anytime, anywhere on any device. MeSign Technology completely make the S/MIME email signature and email encryption simple and easy, so that users can use MeSign APP to send encrypted emails and signed emails easily. MeSign APP has already been implemented successfully in 171 countries and regions around the world. MeSign Technology makes every email has a digital trusted identity, to eliminate the email fraud completely. MeSign Technology makes every email be encrypted, to eliminate the email leak completely.

4. Summary

Finally, you may ask, why does MeSign Technology invest in such a good email encryption solution, and it is completely free?

Good question! We hope to use our innovative technology to completely change the current insecure status of emails in cleartext, and help people use cryptography technology to protect email privacy and secrets with zero threshold. The Free Edition service we provide is a basic-level email encryption application that can meet the basic email encryption needs of people's daily life and work emails. We welcome you to buy the charged email encryption services - Starter Edition and Pro Edition according to your needs to meet your higher-level email encryption and digital signature application needs.