What is the difference between user and domain certificates in S/MIME encryption? What do cloud-based email solutions do?

If you want to sign or encrypt e-mails, you need cryptographic keys. Usually, a key is generated and managed for each person (e-mail address). However, there is also the option of using only a single key for all users.

In some industries, various encryption methods based on S/MIME are used by the communication partners.

Since there are always questions here, we want to compare the following solutions:

• User certificate: Individual certificates on all e-mail devices
• Domain certificate: Central installation on the company mail server
• SecuMail Encryption: Cloud Service for Email Security

‘ keys

These are the differences between user and domain certificates in S/MIME encryption and the classification of our cloud service SecuMail Encryption, which we have implemented with our partners SEPPmail and SwissSign .

We will be happy to advise you on which variant makes sense for you and fits the requirements of your communication partners.