- 1.Overview
- 2.Features
- 3.Settings Screen
- 4.Inbox Screen
- 5.Read Screen
- 6.Setup
- 7.FAQ
- 8.Support
- 9.Copyright
1. Overview
iReadSMIME provides the user with read-only capabilities for SMIME encrypted emails on one email account.
2. Features
iReadSMIME provides the following features:
- Receives and Decrypts SMIME encrypted emails
- Supports Post Office Protocol 3 (POP3)
- Provides support for one email account
- Provides email header fields including To:, From:, CC:, Subject:, timestamp, text body, and attachments
- Supports the use of native viewers for attachments
- Downloads both read and unread encrypted emails
- Downloads the entire email, not just the headers
- Does not remove downloaded emails from the email server
3. Settings Screen
This screen contains the fields for configuring the connection to the email service provider. This screen displays during the initial configuration and by tapping the Settings button on the Inbox screen and contains the following parameters:
- User
This is the user name/ID of the account. This is usually the user's email address, eg: steve@apple.com.
- Email Password
This is the password for the user's email account.
- Protocol
Specifies whether the email account service provider uses the Post Office Protocol (POP3) or the Internet Mail Access Protocol (IMAP) protocol. If the user sets this to "POP", the POP3 protocol is used. If the user sets this to "IMAP", the IMAP4 protocol is used. Check with the email account service provider's documentation for this for this setting. The default setting is "POP".
- Max messages
When connecting to the email service provider, iReadSMIME searches the users's email account to locate any encrypted emails. This setting limits the number of emails that will be searched, beginning with the newest email, and then working backwards. The default setting is 50. A setting of 0 will check all messages in Inbox. The maximium number allowed in this field is 99999.
- Incoming Server
This is the internet host address used to fetch mail inside your mail client. The name often starts with "pop", "Imap" or "mail". Check the email account service provider's documentation for this address.
- Port
This is the port number the incoming mail server listens on. Check with the email account service provider's documentation for this port number.
- SSL
Specifies whether the incoming mail server uses the SSL (Secure Sockets Layer) communications secure internet protocol. If the user selects ON, the SSL protocol is used. If the user selects OFF, SSL is not used.
- Prompt for Password
If this is set to ON, the user will be prompted for their password every time they attempt to read an email (unless the user selects "Ok this Run" on the password prompt). To change this to OFF, the user must provide their key's password for security reasons. The default setting is ON. WARNING: Disabling this option will allow any user with access to this application to view the the contents of any encrypted emails without the use of a password.
- Remove Keys
Tap this key to securely remove all keys on device. You will have to re-download a p12 or pfx file to decrypt emails.
- Buttons
This screen also contains the Inbox button that will take the user to the Inbox and a Help buttons which will show this file.
4. Inbox Screen
The Inbox contains all encrypted emails downloaded from the email account. This is the default screen, once the email client has been configured, and is available from the Account screen by tapping Inbox. The Inbox contains the Account and Edit functions at the top of the screen, and the Check Mail and Information (Help) functions as well as the Status bar at the bottom of the screen.
- Settings
Tap "Settings" to return to the Settings screen. This is where the user can make account changes.
- Edit
Tap "Edit" to delete an email. The user is presented with the option of deleting any desired encrypted emails.
- Check Mail
Tap "Check Mail Arrow" to connect to the email server and download any new encrypted emails.
- Information
Tap "Information" to access this help file.
- Status bar
The Status bar provides information about the last time the Inbox was updated. If the user checks mail and there are no new encrypted emails, the Status bar will turn brown, signifying that only cached emails are available for viewing.
5. Read Screen
The Read screen displays when the user opens an encrypted email for viewing. There are two functions on this screen: Inbox and Trashcan.
- Inbox
Tap "Inbox" button to return to the Inbox screen.
- Trashcan
Tap "Trashcan" button to delete the ematil and return to the Inbox.
- Signature
When viewing an encrypted email, if the subject line contains a green checkmark, this signifies that the email has been digitally signed and encrypted. The signature may or may not be valid. Currently iReadSMIME can only tell the user if the messages has been signed, not the validity of the signature.
- To: and cc: fields
You can hide and unhide the To: and cc: fields by selecting the triangle next to the To: field. To view all To: and cc: values click the To: and cc: field.
6. How to setup iReadSMIME app
To use iReadSMIME, the following steps must be completed:
- Obtain a POP3 or IMAP4 email account.
This is where the encrypted emails will be sent.
- Obtain an S/MIME email certificate.
This certificate will be used to digitally sign emails and to provide the private and public keys used for encrypting emails.
- Export S/MIME email certificate
Export your email certificate to a .p12 or .pfx file. Don't forget to remember your password. Microsoft provides a good explanation explaining the process for exporting certificates
7. FAQ
The following Frequently Asked Questions (FAQ) are provided:
- I received a "No Keys are Found Error"
If you receive this error, there is no decryption key available to decrypt selected message. To supply a key, simply email a copy of a .p12 or .pfx file to this email account, then check for new messages. When the application reads the email containing the .p12 file, you will be prompted for the corresponding password, so be sure to keep that handy.
- I received a "Decryption Failed Error"
This error means the email could not be decrypted with the digital certificate that is currently on the phone. Steps to resolve this error are double check that the sender has the correct public key to send you SMIME messages or to remove the keys on your device (Settings->Remove Keys) and resend the correct keys to the account you are using iReadSMIME for.
- I received a "winmail not supported Error"
This error means the attachment(s) on the email were bundled together into a winmail.dat file. To resolve this, ask the person that sent you the message to resend the message as plain text.
- I received a "Need private key Warning"
To turn off the security prompt while decrypting an email, iReadSMIME needs to verify user. If there is no private key, then the user can not be verified. Download and install a private key before trying to turn off security prompt for decrypting emails. To install a key, simply email a copy of a .p12 or .pfx file to this email account, then check for new messages. When the application reads the email containing the .p12 file, you will be prompted for the corresponding password, so be sure to keep that handy.
- My POP Gmail account has sent items in my Inbox
When you enable POP for Gmail, all messages are downloaded to your client, except for Spam, Trash, and Chats. Gmail reccommends setting up a filter within the mail client, but since iReadSMIME does not support filters yet, you may received encrypted emails or pfx/p12 files that are in other folders besides the Inbox.
9. Copyright
©2010 Oceans' Edge Inc. All rights reserved.
©1991-2010 Information Security Corporation. All rights reserved. Used under license.
Third Party Libraries
- libEtPan! License
http://sourceforge.net/projects/libetpan
Copyright (C) 2001, 2005 - DINH Viet Hoa
All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
3. Neither the name of the libEtPan! project nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.