Archive SecureEmail Keys

Introduction

The SecureEmail Archive stores your decryption keys for your emails secured by Ai-Fi SecureEmail application.

Internally, your emails are encrypted with session keys, individually created per your SecureEmail contacts, each of whom must has been carefully checked and accepted based on the TOFU protocol. However, a few incidents may impact your ability in decoding your past emails:

1. Loss of your phone or deletion of your Ai-Fi Central app
2. Loss or change of their keys of your SecureEmail contacts

Your SecureEmail Archive is where you keep your decryption keys for your SecureEmails which you have successfully sent or received in the past. The actual emails in encrypted form stay with your email provider but their decryption keys are stored separately in the Ai-Fi Incognito Cloud as a Portable Token. Your SecureEmail Archive is not recoverable and your past emails become unreadable unless you offer this token to the app. Make sure your passphrase is securely memorized or stored.

Archive SecureEmail Contents

There are other tools you can use to archive your older emails in order to delete them from the email repositories of your providers (TBD). Note that your understanding of the notion "deleting from your email providers" may not be consistent with how such request is implemented by your providers. This lack of provable "delete" guarantee applies to all third-party email services. However, Ai-Fi SecureEmail makes sure that the cost of compromising any of your emails incurs the same immense amount of efforts due to the SecureEmail's "forward secrecy" and "future secrecy" guarantees. Learn more about this anti-hacking guarantee described in Ai-Fi SecureEmail application.

Enterprise Archive Solution

For enterprise users, Ai-Fi.net provides an archive solution so that enterprises may host their own SecureEmails, including both the email content and their associated keys. This enterprise solution is based on an email proxy architecture so the enterprises may choose their own email servers but delegate the encryption and authentication to Ai-Fi.net. Both the phishing and targeted BEC (Business Email Compromise) attacks will be greatly reduced.

This enterprise solution is planned for Ai-Fi Central 3.0.