电子邮封v3.0

只需一键的安装过程
为IE安装电子邮封v3.0快速而且简单。如果您还没有下载最新电子邮封v3.0软件，请先到这里 下载。如果您已经下载，请按以下步骤进行安装。

双击安装控件，选择你的语言并点击 “确定”。

点击"下一步"继续。

阅读并接收用户使用协议, 点击 “下一步”。

选择安装路径 (默认的路径是 C:\Program Files\gWebs MailCloak ) 并点击 “下一步”。

给开始菜单的文件夹设定个您想要的名字，然后点击 “下一步”， 默认的名字是gWebs MailCloak。

电子邮封v3.0已准备好要安装，点击 “安装”继续最后的操作。

对话框提示“请稍等片刻，正在安装MailCloak。”

恭喜您已经成功安装了电子邮封v3.0，点击 “完成”退出开始界面。

双击IE开始使用电子邮封v3.0。您将看到网页中有一些帮助链接。点击“快速入门”了解怎样开始使用电子邮封v3.0， 或者鼠标右键单击gWebs的图标，再点击“选项”，进入电子邮封v3.0的设置页面。

给Firefox安装电子邮封v3.0是很快捷而简易的。
当您第一次安装电子邮封v3.0时，浏览器上方会自动弹出“Firefox阻止了来自此站点(www.gwebs.com)的安装软件的请求。”提示框，点击 “编辑选项”。

将www.gwebs.com添加到允许安装附加软件的站点列表中。

重新点击gWebs网站Firefox插件安装按钮，弹出“软件安装”窗口，点击“立即安装”。

重启Firefox。电子邮封v3.0一键搞定!

Firefox将自动打开软件成功安装页面。您将看到网页中有一些帮助链接。点击“快速入门” 了解怎样开始使用电子邮封v3.0，或者鼠标右键单击浏览器右下角gWebs图标，再点击“选项”， 进入电子邮封v3.0的设置页面。

欢迎您使用gWebs电子邮封v3.0，它支持GnuPG公钥加密，包括大多数的电子邮件服务，例如Gmail、Yahoo和Microsoft MSN Live Mail，在这个使用指南中，您将了解到怎样为电子邮件公钥加密生成密钥对。

安装完成之后，电子邮封v3.0会自动带您进入“选项”页面。填写必要的信息。

点击“生成”

完成后，您将准备开始接收公钥加密的电子邮件。

即将推出...

电子邮封v3.0是第一个平民化的ISP/Webmail电子邮件加密解决方案，同时支持绝大多数的电子邮件服务提供商是电子邮封v3.0的显著特色。它是一个功能非常强大而易于使用的的工具，能方便快捷地加密和解密您正在撰写的电子邮件正文和附件。当强大的搜索引擎抓取您的电子邮件的时候，它为您的有价值的信息提供最空前的安全保护措施。

电子邮封v3.0是我们前一个电子邮件安全软件-----WebmailSafety的全面升级换代版本，电子邮封v3.0使用GNU Privacy Guard (GnuPG)加密引擎来为用户实施极强的公钥加密，从而也确保我们符合GnuPG加密标准，您就可以自由地与任何人互相加密通信。

电子邮封v3.0全面支持IE和Firefox浏览器。

了解更多有关电子邮封v3.0

下载电子邮封v3.0

功能特点	是否免费
自动保护邮件正文，草稿和附件	√
自动地点对点公钥交换	√
支持11个邮件域，其中包括Gmail、Microsoft MSN Live Mail和Yahoo	√
自动升级使您的安全防护系统和漏洞修复随时安装功能始终处于最新版本	√
内置Gnu Privacy Guard (GPG) 核心加密技术： 多用户使用的基础 密钥服务器 签名功能 开源的代码 基于对称密码(CAST5 Passwords)&密钥对的选项 高达4096位强加密的密钥 可信赖的认证系统	√
无广告，间谍或任何恶意软件	√
支持电子邮件	√
支持电话	√

We have the upmost respect for your privacy. Your important data will never be transferred to us, but we may keep track of some anonymous statistics in order to bring you better service.

To read more about our privacy policy, click here.

No. You must safeguard your private key. If you lose your private key, your encrypted messages become unreadable (and if someone else gets their hands on your private key, your messages become readable to them.)

Yes, but not automatically. You must manually encrypt part of your message with the encryption tool provided in MailCloak → Options → Tools.

That depends on the forwarder. If they choose to send decrypted text, then yes. If they choose to forward encrypted text, then the message remains secure.

There are several methods to prove this. One is you can compile or install your own GnuPG, and manage your keys with an external utility. Another thing you can do is use a network monitoring tool to watch all information that leaves your computer. You will never see any communications initiated by our software or any communications with any of our servers.

In the unlikely event that someone steals your passphrase and private key, you are pretty much up a creek. There is no good way to tell if someone has been reading your email. But you may notice that someone is sending unauthorized email from your account. So choose a strong password and don't share your password. Don't write it down. Don't do anything that could lead to someone compromising your password.

Yes, This is actually the safest way to use MailCloak because the more places you store your private key, the more vulnerable it becomes to attack. but you will only be able to read your encrypted messages on the system with MailCloak.

Encrypted email cannot be scanned for viruses until it is decrypted, so email users cannot rely on their providers to scan encrypted messages for them. However, regular email messages may not contain viruses and malware. Viruses and malware are always contained in attachments.

Because email attachments are crucial to most people, MailCloak enables HTML email and attachments, but they aren't automatically downloaded. Remember: only download attachments from people you trust (this is the same for regular and encrypted email).

No. Your encryption keys stay in your control, so you decide who can open your encrypted messages, not us.

If your computer has been compromised by malware, MailCloak cannot change that. However, once email is encrypted with MailCloak, a hacker would need both your password and your private key to decrypt mail sent to you.

Currently we only support Yahoo, Gmail, Aol, MSN, Live Mail, QQ, 163.com, sina.com and 263.com. We are working on adding many more major webmail systems. We also have a domain inclusion plan where, for a fee, we can add your webmail system.

Currently MailCloak is only in English and Chinese, but we are planning to translate into many more languages. If you are interested in translating MailCloak into your language, you can contact us.

Click here to uninstall (IE / Firefox).

Yes - but this only makes sense if you use different keys for each encryption layer.

Yes.

See the next question.

This question is not as simple as it sounds. It would take the government millions of years to crack a GnuPG encrypted message using brute force. However, it may only take several minutes for someone to guess your password if you don't choose a strong passphrase.

Not yet, but we are working on Mac and Linux versions. You can also click here for more information about getting an OpenPGP compatible encryption system for your mac

MailCloak encrypts email messages fairly quickly – it takes an average of 2 seconds per message to encrypt/decrypt. Once the encryption is done, your email is sent like all other email on the web.

Only a combination of the right password and your private key can authenticate you in the User Panel, thus allowing decryption of emails sent to you. If your identity has been compromised you should create a new identity, (migrate and) delete all email that was sent to your old identity, and tell all your contacts that you have switched public keys.

You can email support@gwebs.com if you have a problem with MailCloak.

No. MailCloak will work over any internet connection.

MailCloak is a simple browser plug-in. It won't affect anything else in your computer.

MailCloak will ask you how you want to encrypt any message you send to someone who's public key isn't in your key chain. You can also turn MailCloak off by clicking on the MailCloak button at the bottom of your browser.

MailCloak automatically encrypts all email attachments up to 20 mb, regardless of their format.

You will see a small MailCloak icon at the bottom of your browser. And when you send mail, MailCloak will ask you how you want to send it. If you are sending email to someone who's public key is in your key chain or receiving encrypted email, Mailcloak will notify you when it encrypting or decrypting automatically.

A Windows PC, and an email account.

MailCloak is free for webmail users and small businesses using google's or Microsofts' small buiness email servers. For medium to large buineses (over 100 employees), or people who have their own email servers, MailCloak costs $29.00 per user per year. The outlook version also costs $29.00 per user per year.

We currently support 11 webmail services including Gmail, Hotmail, MSN mail, Live mail, Yahoo mail and AOL mail, as well as QQ mail, 163.com and 126.com. We are in the process of supporting even more webmail systems.

We currently support Mozilla Firefox, Microsoft Internet Explorer and Outlook. Plug-ins for Outlook, Eudora, Thunderbird, and other email clients as well as support for Mac and Linux platforms are all in the works.

This is a three step process:

* Use the backup feature on one of your MailCloak systems.
* Save the backed up .exe file to a moveable disk, or use secure email to email it the other computer*.
* Run the .exe executable on the second system...

That's it! You're done.
* If you choose to use email to migrate your identities, make sure you are sending secure email to an established identity with an established public key.

Anyone can still send you unencrypted messages. If they want to send you encrypted messages they must use a GPG compatible program for encryption, click here for more information.

Click here to download the latest version of MailCloak.

Navigate to click: gWebs://config or right click on the MailCloak icon and select options.

Don't worry! Every time you view email from a MailCloak or GPG/PGP user, MailCloak will automatically re-download their public key.

If you still have email from them in your inbox, you can open it and the public key will automatically be added back into your keychain. Otherwise you should send them a symmetrically encrypted email asking them to send you their public key again, so you can continue sending them encrypted email.

It is your responsibility not to lose your password or your private key. gWebs doesn't even keep our users personal information, and we certainly don't keep your passwords (would you really want us to?) WebmailSafety passwords and RSA private keys are unrecoverable. Should you lose yours, all your encrypted email and files will become unreadable. Make sure you make a backup of your private key (and preferably, keep it offsite somewhere.) Also, make sure you have a password you won't forget.

Should you really and truly lose your password or private key, you can create another safe identity. You should then send an encrypted email to notify your contacts that you have changed your public key so that they can begin sending encrypted email to your new signed identity.

See here.

See here.

There are many ways MailCloak users can exchange encrypted email with their friends. You can send your friend a MailCloak invitiation, which comes with a MailCloak download link. If your friend is using a platform currently unsupported by mailcloak (such as mac or linux) they can use PGP or one of the many GnuPG encryption tools available at http://www.gnupg.org/related_software/. You can also exchange symmetric (password only) encrypted files and emails at http://www.GpgCrypt.com.

GnuPG stands for GNU Privacy Guard. Sometimes GnuPG is written as GPG.

GnuPG is free, open source encryption software which implements the OpenPGP standard. GnuPG is available on a wide variety of platforms and can be compiled separately and then installed into MailCloak for added piece of mind. You can learn more about GnuPG at http://www.GnuPG.org.

MailCloak uses GnuPG for encryption. GnuPG uses GPG/PGP public key encryption with a choice of algorithms including El Gamal and RSA. MailCloak can uses Keys of up to 4096 bits.

It's extremely easy for unauthorized parities to snoop during the email transmission process, and if you are sending email in plain text, your personal and business information is readable to the world.

Intercepted email can result in big financial losses as well as illegal and malicious use of your private information.

You might think that you never send anything important in your email, so you don't care if anyone intercepts it, but anytime you send a piece of personal information, you may be giving identity thieves another piece of the puzzle. Any

MailCloak encrypts all your email and attachments with 4096 bit GPG encryption - the strongest email protection available to the public. With MailCloak you'll never have to worry about intrusion or snooping by unauthorized parties. Your email service provider doesn't have access to your emails, and our GnuPG encryption is so strong that it would take a billion billion US governments a billion billion years to crack.

You know that MailCloak uses GnuPG for public key encryption, but what is public key encryption? The following is a basic description of public key encryption.

Public key encryption uses keys to encrypt and decrypt messages. When you first use MailCloak you will generate a key pair – a public key and a private key.

The Public Key
The public key is used to encrypt messages that may only be decrypted with the private key.

You can attach your public key to all your email and make it publicly downloadable on your website or blog, because anyone who has it can send you encrypted email.

The Private Key
The private key is used primarily to decrypt messages encrypted with your public key, but it can also be used to encrypt your digital signature so it can only be decrypted with your pubic key.

You should back up your private key and keep both copies somewhere completely secure – never share your private with anyone, email it, upload it to a website or transfer it over any insecure medium. If your private key gets copied, the copier will be able to read your encrypted email or impersonate you by using your digital signature to sign documents.

Conclusion:
Here's the point: you can share your public key with everyone, and then they can use it to encrypt messages which can only be opened with your private key. Since you never share your private key, that means only you can open messages sent to you. In addition, since no one else will have

For a more thorough treatment, you can read this: http://en.wikipedia.org/wiki/Public-key_cryptography.

Quite simply, MailCloak intercepts your messages before they leave your computer, encrypts them, and then sends them on their way. For a more detailed look at how it works, read on.

Stack-Interception Technology:
When you click "send mail" in Yahoo! Mail (for example), your web browser bundles your mail message into a "post" message, and then sends the post message to Yahoo, where your mail is then processed and sent over the web to the recipient. gWebs MailCloak uses custom Stack-Interception Technology (SIT) to intercept the message after it is bundled but before it is sent. Once MailCloak has your message it tells the browser to "hang on a sec". Now MailCloak runs your message though GnuPG, encrypting the content. When encryption is complete, MailCloak repackages the message so it's ready to "post" again and then passes it back to the browser with a wink, and then the browser sends your message off to Yahoo as usual.

All versions of MailCloak use SIT – so that model works the same way in Outlook as it does in Firefox.

点击这里查看详细内容：

A用户使用“电子邮封v3.0”功能给B用户发了封邮件，邀请B用户一起使用“电子邮封v3.0”。
B用户使用“电子邮封v3.0”查看来信，并回复邮件。
当A用户看到这封回信之后，A和B两用户彼此获得了对方的公钥，就能顺利给对方发送加密邮件了。
使用“电子邮封v3.0”，A和B仅仅需要交互一封邮件，从此就能互相发送加密邮件了。

简单地讲，电子邮封v3.0在浏览器里把您的电子邮件用Gnu Privacy Guard (GPG)加密处理，GPG是一个非常成熟和高强度加密的程序，完成处理的信息被送回浏览器，与通常的情况一样最后经浏览器把邮件发送出去。

公钥加密是个非常复杂的过程，这个过程基于繁杂的数学运算， 但是该技术的概述是较浅显易懂的。

以下是你有必要知道的两个概念：

• 公钥加密体系中有两个关系密切的文件，一个叫公钥，另一个是私钥，它们是成对的，必须一起使用。
• 用公钥加密的数据仅仅只能用私钥解密，相反地，用私钥加密的数据也只能用相对应的公钥来解读。

密钥的作用是什么：

• 基本作用：
  您的公钥用于加密别人发送给您的文件和邮件，所以尽量把您的公钥都告诉您的 所有联系人，可以公布您的公钥在网站和博客中，或附在所有发送出去的邮件中，还可以张贴在论坛中，可以说您的公 钥能广泛公布，甚至对您不友好的人。
  您的私钥用于解密别人使用您的公钥加密的邮件和文件，所以您要妥善保管好您 的私钥，如果您的私钥丢失，有人用您的私钥会看到所有的加
• 第二个作用：
  您的私钥可以用来创建数字签名，因为只有您才可以用您自己的私钥，所以保证 只有您才可以用您的私钥做文件和邮件签署。
  您的公钥可用来解读数字签名，因为您的公钥和私钥是成对的，别人可以用您的 公钥来解读您的数字签名，并核实您的身份的确是邮件发送者和信息的签署人。
• gWebs电子邮封v3.0 发送邮件时自动附加公钥（您必须开启这项功能） 电子邮封v3.0也可以发送自动加密解密 的邮件给指定的接收者，并管理您所有的公钥，您需要做的全部的事情就是键入您的密码（别忘了备份您的密钥）。

卸载gWebs电子邮封v3.0实在是件快捷而简单的事情，但是我们一再提醒您在卸载前备份您的 公私钥文件，不然您可能将无法打开所有加密过的邮件。 点击这里查看 怎样备份您的密钥？

开始菜单 → 程序 → gWebs电子邮封v3.0 → 卸载。

点击“是”。

等待完成。

卸载成功。

打开Firefox，进入工具 → 附加软件。

在“扩展”标签中，选择gWebs MailCloak标签，并点击“卸载”。

重启Firefox即可。

安装完成以后，电子邮封v3.0将自动打开软件欢迎页面。

Click "Generate"

When that's done, You're ready to begin receiving public key encrypted email!

Next Page
Public Key Exchange

Previous Page
Introduction

Now that you have generated a public key, its time to send it to your contacts. Once a contact has your public key, they can send you public-key encrypted email. Conversely, once you have someone's public key, you can send them encrypted email.

MailCloak will automatically attach your public key to emails sent to people in supported domains, so go ahead and log in to your email system (we will use Google's Gmail for our tutorial).

Turn on MailCloak
First make sure that MailCloak is turned on.
Notice the MailCloak icon in the right hand corner of your browser. Click it once and see that it turns red – you have just turned MailCloak off. Click it again and it should turn green – now MailCloak is on again.

Compose Email
Now compose an email message to the people you want to send your public key.
Click "send".

Sign your Message

(click here if you have selected "sign" in the MailCloak Menu)

If you have selected "Sign" in the options, you will now see the following dialogue box, asking you to digitally sign your email. Input your key's password to digitally sign this message. Click "Don't sign" if you don't wish to sign it. You can also choose to have MailCloak cache this password forever, by checking "Cache this password for" and selecting “always”.

Now click "Sign" or "Don't Sign".

Send Email
By default MailCloak will attach your public key to email if you don't have the recipient's key in your keychain. If you have edited your advanced settings for symmetrical encryption, or not to send your public key.

(click here for instructions on "how to setup public key attachments".)

Open a new tab or browser window and right click the MailCloak icon in the bottom of your browser. Click "Advanced Settings". Scroll to the bottom of the page, until you see: Symmetrical password options.

You can now select "Ask me what to do every time" or "Send plain text email with my public key attached". Now click "save".

If you chose "Ask me every time" in the advanced options.

click here.

Next you will see a dialog box telling you that MailCloak doesn't have your recipient's public key. Select "Send mail in plain text and attach your public key" and click "OK". You also have the option use symmetrical encryption. Click here to learn more about symmetrical encryption.

Your public key will now be attached to this email and the email will be sent in plain text.

When the recipient with MailCloak replies to this email, they will automatically send you encrypted email with their public key attached. Click "Yes" to attach their public key to your keychain.

And then their email will be decrypted.
Once you have their public key, you can send them encrypted email.

Next Page
Sending Encrypted Email

Previous Page
Key Pair Generation

Reply to their message, and type your message. Click "send".
That's it!

Previous Page
Public Key Exchange

Coming soon......

In this tutorial you will learn:

• Introduction to symmetrical encryption: What symmetrical encryption is, how it works, and how to keep it safe.
• How to setup MailCloak for symmetrical encryption.
• How to send symmetrically encrypted email on Gmail, Yahoo, Hotmail or any other of our supported domains.

What symmetrical encryption is, how it works, and how to keep it safe?
Two kinds of encryption:
MailCloak can send both symmetrically (password-based) and asymmetrically (key-based) encrypted emails on all of our supported domains, including Gmail, Yahoo! Mail and Hotmail.
You may have used symmetrical encryption before in a number of different situations – password protecting Microsoft Word documents or Zip archives, are two standard examples.

How it works:
With symmetrical encryption, a user (let's call her Alice) encrypts a file with a password, and then sends the file to another user (Bob). Now when Bob receives the file he must enter the same password as Alice used in order to decrypt and open the file.

Security Notes - Two Channels:
Alice must tell Bob the password she used to encrypt the file, but for security reasons it is important for her to use a separate communications channel to tell him this password. So for example, if Aice uses Gmail to send Bob her encrypted email, she should use Yahoo! Mail, text messages, or a simple phone call to tell him the password.

Next Page
How to setup MailCloak

Setting up MailCloak for symmetrical encryption is quite simple. First, make sure MailCloak is installed. Click here to download MailCloak if you haven't installed it already.

Now that you have MailCloak installed, follow these steps (you might want to do this in another browser window or tab so you can keep reading this tutorial):

• Right click on the MailCloak icon in the bottom right of your browser and select "Options" .
• Click on "Advanced Settings" .
• Under: "Symmetrical Password Options" Select either
  A) "Use the password below for symmetrical encryption". And type in a password.* OR
  B) Ask me what to do every time.
• Click "save" .

*Note: this password will be shown in clear text until you restart your browser.

Ok, now MailCloak is setup for symmetrical encryption.

Next Page
Sending Symmetrically Encrypted Email

Previous Page
Introduction

Now we will send symmetrically encrypted email.

First, make sure your MailCloak is on. If the MailCloak icon at the bottom of your browser is green, it's on. Otherwise click it once, it should turn from red to green.

Now log into your Gmail, Yahoo! MSN, or other supported account and compose an email to another MailCloak, GnuPG or PGP user whose public key is not in your keychain.

When you are done with your message, click "send as usual" . You may be asked to sign your message. Enter your private key password here if you wish to add a digital signature, or click "Don't sign" .

If you chose "Ask me every time" in the last section .

When you click send a dialogue box should pop up asking you what you want to do. Select symmetrical encryption with this password: and enter a password. And click ok.

If you chose "Use the password below for symmetrical encryption".

Your email will automatically be encrypted with the password you entered.
Now you should see a animation, indicating that your message is being encrypted and sent.
That's it! You're done.

Previous Page
How to setup MailCloak

Coming soon......