iy3xk ftc9ky

ldapx@ends2ends.com extracts your S/MIME signature from the signed email you send it. It then converts it into LDAP/Active Directory attributes userSMIMECertificate and userCertificate. Then the next time (in ~5min) any email client queries the ldapx.ends2ends.com address book for your email address it will return these attributes thus allowing the client to immediately send encrypted email to you. This enables anyone to send anyone else end to end encrypted email. If you are familiar with PGP then ldapx.ends2ends.com serves the same role as public PGP key servers. But S/MIME is built into the majority of email clients; address book lookup is automatic; and S/MIME keys are authenticated by Certificate Authorities. Note: MS Outlook has a 2-byte bug (details) that hopefully Microsoft will fix soon. You can either apply the 2-byte bug fix described there (and here) or add a Windows registry value described here (alternate fix). Mac Outlook, 9folders, and other clients supporting ldap do not have this problem.