As more and more people send confidential information via email, it is increasingly important to ensure that documents sent in emails are not forged. At the same time, it is equally important to ensure that the sent email is not intercepted or accessed by anyone other than the recipient. By using Outlook Express's "Digital logo", you can prove your identity in electronic transactions, just as if you had to present a valid credential when paying a check. You can also use digital identifiers to encrypt messages to protect your privacy. The digital logo is combined with the S/MIME specification to ensure Email Security. (From outlook help)
The entire process of my application (Microsoft Internet Explorer, Outlook Express) is as follows: 1. First, go to the Microsoft Site and have various units and functions for issuing digital certificates, the last one was a https://www.thawte.com, a company dedicated to issuing free digital signatures to secure customer verification and secure email systems, and a trusted Microsoft Root Certificate Authority. 2, to the https://www.thawte.com site, you will find all English, very ugly, it doesn't matter, in the bottom part of the content is: ========================================================== ======================================
Secure your emailSecure your email
Free personal email Certificate. Have your identity asserted through thawte's
Web of trust
========================================================== ====================================== From
Free personal email CertificateLink to the http://www.thawte.com/getinfo/products/personal/contents.html, here is the beginning of your application for a free email certificate. You can enter
Bytes. If you have any questions, you can also go to http://www.thawte.com/getinfo/products/personal/join.htmlto get some help from "how to register" under "personal certificates" in the left-side navigation bar. (In addition, I started to use a 263.net mailbox for application, but I was not able to receive a confirmation letter sent by thawte. It was successful only after I used Sina. In fact, this is not important, this information can be modified later.) 3. After completing the preceding steps ~ After step 7, you should receive a letter in the email you just filled in. Now there should be an email titled "thawte mail ping". If you do not receive it immediately, wait a few minutes and check again. If you do not receive the email within 24 hours, you need to apply again. The biggest possible cause of this failure is that you provide an invalid email address, or the email address is not confirmed by thawte. An address https://www.thawte.com/cgi/enroll/personal/step8.exe is provided in the received mail, and it is obvious that this is the work to continue after Step 7, in addition, a set of validation codes "probe" and "ping" are provided. Fill in the relevant data on the step 8 page. We recommend that you use "copy" and "Paste" to complete the filling operation. Next, confirm some personal information. You can click "Next" to continue the next step until the prompt is complete. 4. At this time, you need to receive the email again. At this time, there should be an email titled "Certificate requested", and some instructions are provided. On this page, you can link "Personal Certificate System" to your. In fact, you can also directly ~ The mailbox name entered in Step 7, and the password is also in step 1 ~ The password entered in Step 7. You should be able to see the "Certificate Manager" column in the left-side navigation bar. Click it to expand it. You can see three projects in sequence: request a certificate (apply for a certificate), view Certificate Status (view certificate status) and revoke a certificate (undo a certificate), you should now go to "request a Certificate, the addition of next is another string, which can be completed smoothly. 5. Now that you have applied for an application, check the email now. Haha, there is another email named "thawte personal Cert issued". It should be okay, this letter provides a link: https://www.thawte.com/cgi/personal/cert/deliver.exe? Serial = 123456. Of course, this is only the form, and the serial number must be different. This page clearly marks "install your MSIE Certificate", and a button prompts you to install it, you don't have to worry about security risks. This is a reliable site. After clicking the "install your Cert" button, you need to check your certificate in this place: the IE tool> Internet Options> content> certificate> personal property page you open now, there should be a certificate issued to "thawte freemail member". You should see your mailbox in the "topic" attribute on the "details" attribute page of the certificate attribute, you can also see other attributes, such as the validity period of one year. OK, you are done! 6. It is worth noting that if you view the email via WWW, the email sent by the recipient with the certificate will have a certificate attachment, and you cannot encrypt your email. ========================================================== ============================= 7. The following content is about how outlook sends, receives digitally signed or encrypted emails.. (1) send a Security Email
As more and more people send confidential information via email, it is increasingly important to ensure that documents sent in emails are not forged. At the same time, it is equally important to ensure that the sent email is not intercepted or accessed by anyone other than the recipient. By using Outlook Express's "Digital logo", you can prove your identity in electronic transactions, just as if you had to present a valid credential when paying a check. You can also use digital identifiers to encrypt messages to protect your privacy. The digital logo is combined with the S/MIME specification to ensure Email Security. (2) How do digital identifiers work?
A digital identity consists of three parts: public key, private key, and digital signature. When you add a digital signature to an email, you add a digital signature and a public key to the email. Digital signatures and public keys are collectively referred to as "Certificates ". You can use Outlook Express to specify the certificate that someone else needs to use to send encrypted emails to you. This certificate can be different from your signature certificate. The recipient can use your digital signature to authenticate your identity and use a public key to send encrypted messages to you, which must be read with your private key. To send an encrypted email, your address book must contain the recipient's digital ID. In this way, you can use their public key to encrypt the mail. After receiving the encrypted email, the recipient uses their private key to decrypt the email before reading it. Before sending an email with a digital signature, you must obtain a digital ID. If you are sending an encrypted email, your address book must contain the digital ID of each recipient. (3) Where can I obtain a digital ID?
The digital identity is issued by an independent authority. When you apply for a digital identity from an authorized authority's web site, the authorized authority has a process of confirming your identity before issuing the identity. Digital identifiers have different types, and different types provide different credit levels. For more information, see help on the authorized organization web site. (4) how to verify the digital signature?
You can use "undo Verification" to verify the validity of an email with a digital signature. For verification, Outlook Express will ask the corresponding authority for information about the digital logo. The authority sends back the status information of the digital identity, including whether the identity has been revoked. The Authority monitors certificates revoked due to loss or termination. (5) set Outlook Express to use multiple certificates
By setting, you can enable Outlook Express to use one certificate when sending a digital signature email, and use another certificate when sending an encrypted email. You must obtain at least one certificate before performing this operation. > On the Tools menu, click Account. > Select the account you want to use the Certificate for, and click Properties. > On the Security tab, click Select to select the certificate type you want to use. (6) obtain the digital ID and add it to the email account.
To send a digital signature email, you must first obtain a digital ID. When you send the first digital signature email, Outlook Express automatically adds your digital ID to the email account. In a new mail window, select digital signature from the tool menu. Write and send emails.
When you send an email, Outlook Express searches on the computer to find a valid digital ID with the same email address and add it to your email account. If multiple valid numeric IDs are found, you must select one of them to be added to the Account. Tips
To use a digital ID correctly, the email address must match the email account address. If you have multiple email accounts, you must prepare a separate digital ID for each account to send secure mail. If you have set different reply addresses (which can be set in the General tab of the account properties dialog box), the recipient of the email cannot use your ID to reply to the encrypted email. When sending a Security Email, your reply address must be consistent with the account used to send a digital signature email. (7) read emails with digital signatures and/or encryption
You can read emails with digital signatures and/or encryption like other emails. When you open or preview a mail with a digital signature and/or encryption for the first time, Outlook Express displays a help screen. If you receive a problematic security email, for example, the email has been tampered with or the sender's digital identity has expired, you will receive a security warning before being allowed to read the email content, it details the problem. Based on the information in the warning, you can decide whether to view the email. After sending a digitally signed email to a contact, you can read the encrypted email sent by the contact by reading the regular email. In addition, if you do not have the sender's digital identity when receiving an email with a digital signature, it is automatically added to your address book. ========================================================== ========================================== Have you found that these statements about outlook are quite good? Oh, of course I did not write it. I copied it from the help of outlook :)
If you have any questions, send me an email, but it is better to take this process as an English learning process. (Author: aladdina)
