Since more and more people send confidential information by email, ensuring that the document sent in the email is not a forgery becoming increasingly important. At the same time, it is equally important to ensure that the sent mail is not intercepting and sneaking other people other than the recipient.
By using Outlook Express's "Digital Identity", you can prove your identity in an electronic transaction, just like a valid document when you share the check. You can also use digital identity to encrypt emails to protect personal privacy. The digital identity combines S / MIME specifications to ensure the security of email.
The following is the entire process I applied (Microsoft Internet Explorer, Outlook Express):
1, first of all, to Microsoft's site, relevant units and functions issued by the digital certificate, where the last one is https://www.thawte.com, this is a household verification and security mail system A free digital signature company is issued, and it is a trusted root certificate authority that Microsoft is trusted.
2, after https://www.thawte.com Site, you will find that all English, it is difficult to see, don't matter, some of the following content is:
============================================================================================================================================================================================================= =============
Secure Your Email
Secure Your Email with Free Personal email ceertificate.
Have Your Identity Asserted THROUGH THAWTE'S Web of Trust
============================================================================================================================================================================================================= =============
From
Free Personal Email Certificate Link to
http://www.thawte.com/getinfo/products/personal/contents.html, here is the beginning of your application for free mail certificates. You can mark the small icon "Join" from the page.
Https://www.thawte.com/cgi/enroll/personal/step1.exe officially started application, this process takes 7 steps, patient points, slowly. If you have any questions, you can also enter http://www.thawte.com/getinfo/products/personal/join.html by "How toregs" under "Personal Certificate" in the left navigation bar. To see what you need to do can do it. (In addition, I started using the 263.NET mailbox to apply, but I can't receive the confirmation letter sent by Thawte. Later, it is not important to use Sina. In fact, this is not important, because this information can be modified later. 3, after completing the above Step1 ~ STEP7, you should go to the mailbox you just fill in to collect the letter, and now there should be a message titled "Thawte Mail Ping", if you don't have it, Wait a few minutes, if you don't receive it within 24 hours, you need to reapply, the biggest possible reason for this fault is that you provide an invalid Email address, or the email address is not confirmed by Thawte. An address is provided in the received message
Https://www.thawte.com/cgi/enroll/personal/step8.exe, it can be apparent that the work will continue after STEP7, and also provides a set of confirmation code "probe" and "Ping", fill in the related data in the page of STEP8, which is recommended to use "copy" and "paste" to complete the fills. Next, it is a confirmation operation of some personal information, you can press "Next" to continue the next step until the prompt is completed.
Http://www.japee.com.cn/jew/bbs.aspx
4, this time you need to go back to the email, this should be a message with a title "Certificate Requested", which also provides some instructions, you can pass
http://www.thawte.com/certs/personal/wot/ttpintro.html Link to the address that needs to continue. In this page you can link "
Personal Certificate System
Http://www.thawte.com/getinfo/programs/personal/contents.html, then link "login" small icon to continue. In fact, you can also go directly
Http://www.thawte.com/cgi/personal/contents.exe Continue, you need to enter your username and password before this page is open, this username is the name of the mailbox name you filled in Step1 ~ Step7, the password is also The password filled in Step1 ~ STEP7. You should be able to see the "Certificate Manager" column in the navigation bar on the left. After clicking, you have seen 3 projects, follow: request a certificate, view certificate status (view certificate) Status) and Revoke a certificate (withdraw a certificate), you should now enter from "Request a certificate", and a string of choice adding next, you should be able to complete it smoothly.
5, since you have applied, then go to the email now, haha, there is a message named "Thawte Personal Cert Issue", there should be no problem, and it is, this letter is provided. A link: https://www.thawte.com/cgi/personal/cert/deliver.exe? Serial = 123456, of course, is only the form, the serial number is definitely different, this page is clearly marked "Install Your" "Msie Certificate", there is a button prompts you to install, don't worry about safety hazards, this is a trusted site, click the "Install your certificate" button, you will need to see your certificate: You are open now The IE "Tool" -> "Internet Options" -> "Content" -> Certificate -> "Personal" property page, there should be a certificate issued to "Thawte Freemail Member", "Details" Details in Certificate Properties "The" Topic "attribute of the Properties page You should be able to see your mailbox, and you can also see other properties, for example, the validity period is one year. OK, I'm already gone!
6. It is worth noting that if you look at the email in WWW, the other party's mail will have a certificate attachment, and you can't encrypt your email.
============================================================================================================================================================================================================= ===========
7. The following is about how Outlook is sent, receives a digital signature or encrypted message.
(1) Send a secure mail
Since more and more people send confidential information by email, ensuring that the document sent in the email is not a forgery becoming increasingly important. At the same time, it is equally important to ensure that the sent mail is not intercepting and sneaking other people other than the recipient.
By using Outlook Express's "Digital Identity", you can prove your identity in an electronic transaction, just like a valid document when you share the check. You can also use digital identity to encrypt emails to protect personal privacy. The digital identity combines S / MIME specifications to ensure the security of email.
(2) How is the digital identity?
The digital identifier consists of three parts: "public key", "private key" and "digital signature". When you add a digital signature, you add a digital signature and public key in the email. Digital signature and public key are called "certificates". You can use Outlook Express to specify the certificate you want to use when you send you an encrypted message. This certificate can be different from your signature certificate.
Recipients can use your digital signature to verify your identity and you can send you an encrypted message using a public key. These messages must be read with your private key. To send an encrypted message, your address book must contain the number ID of the recipient. This way, you can use their public keys to encrypt emails. When the recipient receives an encrypted message, use their private key to decrypt the email to read.
Http://www.japee.com.cn/jew/bbs.aspx
You must get a numeric identity before you can send a digital signature. If you are sending an encrypted message, you must contain the digital identity of each recipient in your address book.
(3) Where can I get a digital identification? The digital identity is issued by an independent authorization agency. When requested for a digital identification to the WEB site of the authority, the licensee has a process of confirming your identity before issuing the ID. Digital identity has different categories, and different categories provide different credit levels. For more information, see Help on the authorization agency web site.
(4) How to verify the digital signature?
With the "revoking check", you can verify the legality of the message with digital signature. When checking, Outlook Express requests information about the digital identifier to the appropriate authorization agency. The authorization agency sends the status information of the digital identification, including whether the identity has been revoked. The licensee will monitor certificates that are revoked due to loss or termination.
(5) Set Outlook Express to use multiple certificates
With the setting, you can use a certificate when sending a digital signature message, while using another certificate when sending an encrypted message. You must get at least one certificate before doing this.
>> On the Tools menu, click the account.
>> Select the account you want to use to use the certificate, and then click the Properties button.
>> On the Security tab, click Select to select the type of certificate you want to use.
(6) Get the digital identity and add it to the mail account
To send a digital signature message, you must first get a digital identity. When you send the first digital signature, Outlook Express will automatically add your numeric identity to the mail account.
In a new mail window, select Digital Sign from the Tools menu.
Write and send an email.
When you send an email, Outlook Express will search on your computer to find a valid numeric identifier with the same email address and add it to your mail account. If you have found multiple valid numeric IDs, you must select a added to your account from it.
Http://www.japee.com.cn/jew/bbs.aspx
Trick
To properly use a numeric identity, the address of the digital identifier must match the address of the mail account. If you have multiple mail accounts, you must prepare a separate digital identity for each account to send secure mail.
If you have set different reply addresses (set in the General tab in the Account Properties dialog box), the recipient of the message will not be able to reply to your ID with your logo. When you send secure mail, your reply address must be consistent with an account used to send a digital signature message.
(7) Read the mail with digital signature and / or encrypted
You can read a digital signature and / or encrypted message like reading other emails. Outlook Express displays the help screen when you open or preview messages with digital signatures and / or encrypted messages.
If there is a problematic secure message, such as the mail has been tampered with or the number identity of the sender has expired, you will see a security warning before being allowed to read the message content, which details the problem. Depending on the information in the warning, you can decide whether to view the email.
After sending a contact with a digital signature to the contact, you can read the encrypted email by reading regular mail.
In addition, when you receive a message with a digital signature, if you have no sender's digital identity, it will be automatically added to your address book.
============================================================================================================================================================================================================= ================= Is there anything about these writes about Outlook? Oh, of course, I am not written, it is Copy from Outlook :)
If you have any questions, send it to me. (
Aladdina)
