|
How EaSecure Works?
EaSecure is a public-key encryption-based secure
email system that is made as easy to use as putting envelopes on your personal
letters. In many ways, it is very similar to the envelopes that you use for
sending personal letters.
When you send an EaSecure message, the EaSecure
software will determine whether the recipient is already an EaSecure user by
checking whether a valid recipient certificate can be located either on the
sender's computer or on the Certificate Server. If a valid certificate can be
located, the certificate will be verified and the public key in the certificate
will be used to encrypt the message sent to that recipient. The recipient can
use his or her corresponding private key to decrypt the message. EaSecure messages sent in this way are like personal letters
enclosed in envelopes made of steel that nobody can break.
If the recipient's certificate is not available from the EaSecure certificate
server, indicating that the recipient is not yet an EaSecure user, the EaSecure
message sent to that recipient will be protected by a one-time password. The
one-time password will be sent to that recipient from the EaSecure Certificate server
in a separate email. Because the one-time password is sent in the clear, there
is no absolute guarantee that nobody else except the intended recipient can open
the one-time-password-protected message. Anyone who intercepts both the email
containing the one-time password and the EaSecure message protected by it will
be able to open the message. What EaSecure does guarantee, however, is that this
cannot be done without being noticed. Because the one-time password can only be
used once, you cannot use it again if someone has already used it and you will
certainly notice that you have been spied upon. This is very similar to the
paper envelopes you use to send personal letters. An envelope does not guarantee
that nobody else except the intended recipient can open it - anybody can tear it
open - but a damaged envelope will alert the recipient that he or she has been
spied upon, and few prying eyes are willing to risk that.
When the recipient opens
the one-time-password-protected EaSecure message for
the first time, his or her public/private keys will be automatically
generated at the recipient's computer. The public key will be sent to the EaSecure certificate server for the server to issue
certificates. The corresponding private key will be stored on
the recipient's computer, protected by the recipient's own password. After that, the
recipient's certificate will be available from the EaSecure certificate server
and subsequent messages sent to that recipient will be encrypted by the
recipient's public key. The recipient can open these subsequent messages using
the corresponding private key. In addition, all one-time passwords previously used to protect EaSecure
messages sent to the same email address will also expire immediately. These
one-time passwords will become useless and cannot be used to open any EaSecure
messages anymore. Instead, keys necessary for opening those previously received
one-time-password-protected EaSecure messages will only be stored in the key file
encrypted by the recipient's password, just like the private keys. This allows the
recipient to open those one-time-password-protected EaSecure messages by
entering his or her own password. This is how the magic happens - after the
recipient opens the first envelope, all paper envelopes sent to the same address
will immediately turn into steel and future letters sent to the recipient will
always be enclosed in steel envelopes that nobody can break. Only the recipient
holds the key to open these steel envelopes.
As
described above, an EaSecure message can always be sent, regardless of whether the
recipient is an EaSecure user. The only difference between a user and a non-user
is that a user will receive messages in steel envelopes, while a non-user will
receive messages in paper envelopes, until he or she opens the first message to
become a user, and then all paper envelopes will turn into steel envelopes. This
again is very similar to sending personal letters with envelopes - the recipient
does not have to do anything before the letter can be sent.
Unlike
other email encryption systems that require both the sender and the recipient to
pay, EaSecure is always free to recipients. This again is very similar to
sending letters using envelopes. The sender pays the postage, and the recipient
can always receive for free.
Should you start putting envelopes on you emails now? You can get started by
simply entering your email address below and clicking "Try It Now!" (You will receive a "Welcome" EaSecure message
from customercare@easecure.com
and an email with the one-time password from
support@easecure.com.):
|