Secure e-mailing with Gmail becomes easy on Desktop and Android. Encrypt and Sign your Gmail messages with industry standard – S/MIME using Chrome, Yandex or Firefox browsers.
Fossa Server and Fossa Guard web extension provide secure mailing solution on top of Gmail (TM) following S/MIME specification.
Fossa Guard generates key pair within your browser then Fossa Server securely supplies you with personal X.509 certificate upon Certificate Signing Request (CSR) so that your private key always stays with you.
Use Fossa Guard extension to sign or to encrypt your email with X.509 certificate. The certificate is free and stays valid for 3 months (beta phase limitation).
Fossa Guard has own autonomous Compose dialog to avoid unsecured email content auto-saving.
Your private key is protected by pass-phrase and is replicated alongside with trusted certificates via your protected local user storage. Use Fossa Guard to get details on certificates in your repository.
Please refer to Privacy policy at https://fossa.me/policy
Puedes leer la valoración en español mas abajo.
[ENGLISH]
The good …
-You can sign the emails with the certificate that they generate and it is well integrated into Gmail.
– You can include your own certificate (I haven’t tried it)
The bad …
– The certificate with which it is signed is not recognized as valid by mail clients (for example Thunderbird) because it is not issued by a trusted CA.
Not good not bad …
– The permits that must be given are many, but at least they seem reasonable.
– I don’t trust uploading my own certificate to a server.
The summary…
– If the certificates were issued by a trusted CA I would use it, but sending emails that carry a certificate notice seems ugly to me. I can’t ask my senders to include a CA on their computers because I’m going to send them emails.
[ESPAÑOL]
Lo bueno …
-Puedes firmar los correos con el certificado que te generan y está bien integrado en Gmail.
– Puedes incluir tu propio certificado (no lo he probado)
Lo malo …
– El certificado con el que se firma no es reconocido como válido por los clientes de correo (por ejemplo Thunderbird) porque no lo emite una CA de confianza.
Ni bueno ni malo …
– Los permisos que hay que darle son muchos, pero al menos parecen razonables.
– No me fio de subir un certificado emitido para mi email por una CA de confianza a un servidor. Debería poder dar la opción de firmar en local.
El resumen…
– Si los certificados estuviesen emitidos por una CA de confianza la usaría, pero enviar emails que llevan un aviso de certificado me parece feo. No puedo pedirle a mis remitentes que incluyan una CA en sus equipos porque yo les vaya a enviar emails.
it just doesn’t work. It’s just too complicated. Tried this, tried that, free version, paid – it would just never work, always something new coming up. Not mature yet.
beim schreiben der Empfänger-Email ploppt nur kurz ein Fenster auf um das Konto auszuwählen. So kann man keine Mail schreiben.
I had high hopes for this but entering email addresses by hand (instead of them popping up as they do in Gmail) was an issue, complicated by the email address always showing one less letter than I actually typed. That was quite annoying. ***UPDATE: This aspect suddenly started working properly after exiting my browser and restarting it, and logging in to Chrome again. ***
I then attempted to send an email from within the extension, and it warned me that it would be sent unencrypted and asked me if I wanted to continue. I chose to continue but it then failed telling me that the recipient wasn’t secure (diff wording). So it could not even send an email out insecurely. This has proven to be frustrating and a waste of my time. Too bad.
This is a great start. Just playing with it for a bit and I was able to send smime encrypted between my work and gmail email. Needed to figure out how to add my work smime cert as a trusted endpoint.
I see I have a fossa smime cert in my windows key store. I will see what happens later when trying to setup on a different computer. I suppose I could backup and import my fossa smime cert.
Great Job. This is pretty good. I don’t think there is much out there like this. Keep up the great work!
Nice start, but three-month certs and 100KB max attachment size doesn’t cut it, nor does the Fossa window closing itself if you type your passphrase wrong even one time.
I look forward to giving this 5 stars after it’s out of beta and such issues are ironed out.
I’m impressed by the seamless integration.
Is there a way to make this extension work in Opera?
It works! Finally I’ve got free S/MIME implementation for GMail with attachments support.
Finally a S/MIME solution for Gmail in Chrome!
I am looking forward to add the possibility to use own certificates!
Further, I couldn’t find a way to verify signatures from Emails I receive…
Keep on with your work, there are many people waiting for it!