

OpenPGP relies on something called a Web of Trust, in which everybody is a potential CA. You, as the user, sign your keypair and then others verify whether or not the key really belongs to you by signing it themselves. OpenPGP, on the other hand, doesn’t rely on a centralized trusted authority. These are referred to as CAs, or Certificate Authorities.

Using S/MIME, the user obtains the certificate and keypair from a centralized trusted authority. That difference is in how you get your public/private keypair. The software never converts the binary data into ASCII. Your binary files stay right the way they started.Īnother key difference between S/MIME and OpenPGP is more apparent to you, the user. On the other hand, OpenPGP wraps the text and any binary attachments in “ASCII Armor,” an encoding layer. On the recipient’s end, software decodes the ASCII into text or binary files. Your email software transmits nearly everything as ASCII. S/MIME utilizes a standard way of putting arbitrary data into your email, with a definition of what type of information is there. Key Differences Between S/MIME and OpenPGPįrom a technical standpoint, S/MIME and OpenPGP function pretty differently.
