Protect your domain and your recipients from abuse: phishing and spoofing defense, email encryption, TLS, S/MIME, and secure delivery. Practical, standards-based explanations of how email security works and how to configure it correctly.
S/MIME vs PGP is the decision every organisation and individual faces when they decide to encrypt email end to end. Both standards scramble a message so only the intended recipient can read it, and both add signatures that prove who sent it — but they take opposite approaches to the hardest problem in cryptography: deciding … Read more
PGP encryption is the decentralised way to send email that only your intended recipient can read. Where corporate mail leans on certificate authorities, PGP encryption puts trust in the hands of users themselves: you generate your own key pair, share your public key, and verify other people’s keys directly. PGP email encryption is the technology … Read more
S/MIME encryption is the most widely deployed way to add end-to-end confidentiality and verified sender identity to ordinary email. Built into Microsoft Outlook, Apple Mail and most enterprise clients, S/MIME encryption uses certificates issued by a trusted Certificate Authority to scramble a message so that only the intended recipient can read it — and to … Read more
Email encryption protects your messages from being read or altered while they travel — and, in its strongest form, ensures only the intended recipient can ever open them. Because email was designed without built-in privacy, encryption is bolted on at two levels: encryption in transit between mail servers, and end-to-end encryption of the message itself. … Read more
Email phishing is the use of fraudulent email to trick people into revealing passwords, paying fake invoices, or installing malware — and it remains the single most common way organisations are breached. Defending against it takes two things working together: technical controls that stop attackers impersonating trusted senders, and people who can spot the messages … Read more
Email spoofing is the forging of an email’s sender address so a message appears to come from someone it does not — your bank, your CEO, or your own domain. It is the technical foundation of most phishing and business email compromise, and because plain email was never designed to verify the sender, stopping it … Read more