With so many emails traveling back and forth, it\u2019s vital that we make the communication process as secure as possible. This importance jumps ten-fold when you\u2019re a business owner, executive, or an employee who handles sensitive data. Some types of sensitive data that you want to protect could include:<\/p>\n\n\n\n
- Intellectual property,<\/li>
- Credit card numbers,<\/li>
- Customer contact info,<\/li>
- Personal employee data, and<\/li>
- Pretty much anything else you can think of.<\/li><\/ul>\n\n\n\n
And you don\u2019t just have to worry about someone infiltrating your email, you also have to worry about cybercriminals using email to trick your employees into giving away data via phishing scams<\/a>. The FBI reports<\/a> that between June 2016 and July 2019, more than $26 billion dollars were loss due to business email compromise\/email account compromise (BEC\/EAC) scams. Yikes!<\/p>\n\n\n\n
So, with all this talk about the dangers of email, we\u2019re sure you are wondering how you can secure your email communications. One way is with S\/MIME. What is S\/MIME? So glad you asked\u2026<\/p>\n\n\n\n
What Is S\/MIME?<\/h2>\n\n\n\n
S\/MIME, which stands for secure multipurpose internet mail extension, is an email security protocol. Although S\/MIME certificates are commonly known as email signing certificates<\/a> and personal authentication certificates, their purpose is two-fold:<\/p>\n\n\n\n
- To ensure the email recipient can confirm the sender\u2019s identity (that they are who they claim to be and not an imposter).<\/li>
- To prevent unintended parties from intercepting, reading, or compromising email contents in any way when in transit or while sitting on an email server.<\/li><\/ol>\n\n\n\n
S\/MIME certificates are able to accomplish these two objectives with the use of a digital signature and end-to-end encryption. You apply the digital signature to the message and hash it before encrypting it to ensure the message\u2019s integrity.<\/p>\n\n\n\n
![\"What](\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/02\/what-is-smime-how-smime-works.png\")
A visual depiction of how S\/MIME encryption works<\/em>. The sender uses the recipient’s public key to encrypt the message before sending the message to them to decrypt using their corresponding private key. <\/figcaption><\/figure>\n\n\n\n You can think of the digital signature as your personal identification stamp that only you can create. The concept is similar to using a unique wax seal to help seal letters to prevent people from tampering with your communications. You know who it\u2019s from and whether someone has opened it. S\/MIME certificates use public key encryption to accomplish this feat. The sender will use their private key to digitally sign their email. Then, a public key accompanies the email as its sent and is used by the recipient to authenticate your signature.<\/p>\n\n\n\n
The end-to-end encryption is what ensures your email contents are not read or modified by unintended parties. It protects data both while it\u2019s in transit and at rest. The emails are encrypted with the recipient’s public key and decrypted with the recipient\u2019s private key. What\u2019s great about this in particular is that it encrypts your communications before you even hit the \u201csend\u201d button!<\/p>\n\n\n\n
![\"S\/MIME](\"https:\/\/cheapsslsecurity.com\/blog\/wp-content\/uploads\/2021\/02\/how-smime-works-encryption-decryption.png\")
A visual depiction of the S\/MIME process that shows how you can use it to encrypt and then decrypt data.<\/em> The sender sends an encrypted email to the recipient who uses their private key to decrypt the message on their end.<\/figcaption><\/figure>\n\n\n\n An S\/MIME certificate\u2019s ability to provide this type of security accomplishes quite a bit:<\/p>\n\n\n\n
- Serves as a counter against spoofed phishing emails.<\/li>
- Helps you to avoid man-in-the-middle attacks.<\/li>
- Prevents your data from being exposed in data breaches and leaks.<\/li>
- Protects data for your customers, clients, employees, and anyone else you send emails to.<\/li>
- Helps you to avoid long-term damage done to your brand.<\/li>
- Helps you stay compliant with a variety of industry regulations (HIPAA, GDPR, CCPA, PCI DSS, etc.)<\/li><\/ul>\n\n\n\n
S\/MIME is supported by most major email clients. This list of clients includes:<\/p>\n\n\n\n
- Apple Mail,<\/li>
- Gmail,<\/li>
- IMB Notes,<\/li>
- iPhone iOS Mail,<\/li>
- Microsoft Outlook, and<\/li>
- Mozilla Thunderbird.<\/li><\/ul>\n\n\n\n
What Is S\/MIME? Breaking Down S\/MIME Validation Levels<\/h2>\n\n\n\n
S\/MIME certificates generally go by three different validation levels or sometimes they’re bunched in a \u201cclass.\u201d This classification can vary from one certificate authority (CA) to the next, but the general guide below should put you in a position to select the best S\/MIME certificate to meet your needs.<\/p>\n\n\n\n
Email Validation and Domain Validation S\/MIME Certificates<\/h3>\n\n\n\n
I\u2019ve grouped these two together because there\u2019s a lot of overlap between them. As the names imply, email validation and domain validation require you to get your email or domain validated. This usually results in a pretty quick turnaround time in terms of a CA issuing your certificate (often within minutes). Some CAs will want to validate both your email and domain.<\/p>\n\n\n\n
Individual Validation S\/MIME Certificates<\/h3>\n\n\n\n
This level of validation is geared towards a single employee or a freelance worker (something like an individual software publisher). That\u2019s because individual validation typically requires some type of identification card and a company email during the process. Once again, this validation process takes only a few minutes for some CAs to complete.<\/p>\n\n\n\n
Organization Validation S\/MIME Certificates<\/h3>\n\n\n\n
This validation level is for organizations who want to validate their entire company. This validation process is a bit more involved and could take one to five days depending on the CA. The process usually involves a verification phone call as well as verifying the email address, domain, and the existence of the organization.<\/p>\n\n\n\n
More on What S\/MIME Is & What an S\/MIME Certificate Comes With<\/h2>\n\n\n\n
The validation levels could affect what add-on features come with your S\/MIME certificate. The add-on features below could be included with a DV or IV certificate, or a CA may designate them as special features that only come with an OV S\/MIME certificate.<\/p>\n\n\n\n
Document Signing<\/h3>\n\n\n\n
If you\u2019re able to use your S\/MIME certificate for document signing, it\u2019s a nice added bonus for your purchase. Document signing functions in a way that\u2019s similar to email signing in that it uses a digital signature for verification. You\u2019ll use your private key to digitally sign a document before sending it off. The recipient will be able to verify the document was signed by you via your unique digital signature.<\/p>\n\n\n\n
Your digital signature also acts as a seal over the document in that if someone tampers with the document and breaks the seal, your recipient will be notified with a warning message. One thing to pay attention to when purchasing an S\/MIME certificate is what programs are compatible with the certificate. For example, your S\/MIME certificate may be compatible with Microsoft Office suite but not Adobe. So, if you mainly use Adobe Acrobat\/Adobe Reader, then you might want to get a document signing certificate that\u2019s separate from your S\/MIME certificate.<\/p>\n\n\n\n
If you run into an issue like this, a great resource is the Adobe Approved Trust List<\/strong><\/a> which has a list of certificates that are trusted by Adobe.<\/p>\n\n\n\n
Digital Signature vs E-Signature<\/h3>\n\n\n\n
As we mentioned earlier, an integral component of every S\/MIME certificate is its digital signature. But many people are unsure of the differences between an e-signature and digital signature. So, we thought it would be good to take a moment to explain the difference between the two.<\/p>\n\n\n\n
Contrary for what some people think, they\u2019re not<\/strong> the same. An e-signature, or electronic signature, is really no more than a way to sign a person\u2019s name on a digital document. A digital signature (used with a proper certificate), on the other hand, gives the recipient a way to verify the sender\u2019s identity is legitimate and know if someone tampers with documents.<\/p>\n\n\n\n
Client Authentication<\/h3>\n\n\n\n
Some S\/MIME certificates includes a client authentication feature that enables you to use certificate-based two-factor authentication to better secure your servers, apps, and network.<\/p>\n\n\n\n
With the client authentication feature, you have the power to ensure only authorized users can access your servers and all the important data they store. Basically, only users with the proper client certificate installed on their device can authenticate themselves and connect to the server or service. This is much more secure than just using a password to protect your server as passwords are easy to phish or crack via brute force attacks and other password cracking methods.<\/p>\n\n\n\n
S\/MIME Certificate Options<\/h2>\n\n\n\n
If you\u2019re looking for a S\/MIME certificate, you can find one right here on CheapSSLSecuirty.com<\/a>. For example, our DigiCert S\/MIME certificate<\/a> is an OV certificate that comes with a document signing and client authentication feature. It takes two days (or less) for the validation process to complete and it\u2019s coming from DigiCert \u2014 the world\u2019s leading CA. And the best news is that our S\/MIME certificates don\u2019t break the bank<\/a>!<\/p>\n\n\n\n
What Is S\/MIME & Why Do You Need It? A Final Word<\/h2>\n\n\n\n
As we wrap up our journey and answering the question \u201cwhat is S\/MIME?\u201d it is important to remember a few key takeaways:<\/p>\n\n\n\n