S/MIME (Secure/Multipurpose Internet Mail Extensions) is a standard that adds digital signatures and encryption to email messages. It uses X.509 certificates, the same family as website certificates, usually issued by a certificate authority.
Why it matters
A signature proves the message came from the certificate holder and was not altered; encryption ensures only the recipient with the matching private key can read it. Corporate environments favour S/MIME because it is built into clients such as Outlook and Apple Mail and can be managed centrally. Its limits: you need the other person's certificate to encrypt to them, and lost private keys mean old encrypted mail can become unreadable. It protects message content, unlike SPF, DKIM और DMARC, which authenticate domains.
Example
Jane obtains an S/MIME certificate for jane@example.com and installs it. When she signs a message, the client attaches her certificate and signature, and recipients see a signed-message indicator. After she receives a signed email from Bob, she has Bob's public key, so she can send him encrypted mail.
Common mistakes
- Confusing S/MIME with TLS; TLS protects only the connection between servers, not the stored message.
- Not backing up private keys before changing devices.
- Assuming signatures hide the subject line or metadata, which stay readable.
Related
Get notified when this term updates
Plus occasional practical tips on uptime and monitoring, nothing else. Unsubscribe anytime.
यह पेज सामान्य जानकारी है, जिसे हमारी संपादकीय टीम ने लिखा है और दस्तावेज़ीकरण बदलने पर अपडेट किया जाता है। सर्वर और प्रदाता अलग-अलग होते हैं, इसलिए बदलाव पहले सुरक्षित तरीके से जाँचें। देखें: संपादकीय नीति और अस्वीकरण.