S/MIME (Secure / Multipurpose Internet Mail Extensions) is a standard for email encryption.
As with PGP, there is a private key and a public key. If you want to send an encrypted message to someone, you need their public key. If you want to receive an encrypted e-mail from someone, they need your public key to encrypt the e-mail with it. With your private key, ONLY you can decrypt the received encrypted message.
Since PGP and S/MIME use different key formats, the two methods are unfortunately not compatible.
In order to ensure that you as the sender of an e-mail are also the person you claim to be, S/MIME, just like PGP, also offers the option of signing your e-mails in addition to encryption.
S/MIME has the great advantage over PGP that it is already available in many mail programs and smartphones. On the other hand, the creation of the required key pair is somewhat more complicated than with PGP. For this you need an "X.509 certificate", which you can obtain free of charge from an official certification authority.
There are four classes of these certificates. They differ in the thoroughness of the applicant's verification:
The class 1 certificates, which are usually sufficient for private use, are given to you as a file.
Free S/MIME certificates were available in the past from Comodo and StartCom, but both have discontinued their free service. Maybe LetsEncrypt will soon offer free S/MIME certificates?
The following list at Mozilla lists some providers that offer free S/MIME certificates. BUT: Most of them have a catch, either the certificates are only valid for 30 days, the root certificate of the provider is not pre-installed in all operating systems, or the private key is generated by the respective provider. You should not do the latter, you should be the only one in the world who has access to the private key (and can thus decrypt and sign e-mails).
S/MIME certificates that are subject to a fee are available from Digicert, Sectigo (formerly Comodo) or InstantSSL, for example:
All rights reserved. ©2015-2023 by mail.de GmbH