EviCypher Webmail & Cloud

Description

To take full advantage of the extension's features, you must have an NFC HSM device compatible with Freemindtronic's EviCypher technology. However, the extension has free features that work without a device such as a potential security risk detector on an iframe element displayed in the content of a website. This allows you to easily manage the trust of this site before entering sensitive information such as passwords, email addresses or credit card information. This extension has an Iframe Redirect Detection and Removal (IRDR). It is an effective solution to counter attacks such as BITB (Browser in the Browser) which uses iframes to redirect you to fake pages.

To use the free Iframe Redirect Detection and Removal (IRDR) feature of the EviCypher extension, you need the following:
- A web browser for Chromium-based computer such as Chrome.
- Enabling BITB (Browser-in-the-Browser) feature
- End

A window will be displayed as soon as the rediction iframe is detected. You will have three choices:
- A button (close warning) to close the iframe
- A button (never show warning on this site) for this IRDR window is no longer displayed for this url that you consider to be trustworthy. It will be saved in the browser.
- The button (Destroy) to delete the iframe related to the redirected link displayed in the URL window: https://...
- A button (Clean Storage) to delete trusted URLs saved in the browser via the IRDR.
- A button (Read More) which redirects you to the BITB page of the Freemindtronic website.

To use the webmail and attachments encryption extension, you need the following:

- The Chromium-based browser extension such as Chrome.
- An NFC device with EviCypher technology,
- The Freemindtronic Android application installed on an NFC-enabled phone,
- EviDNS ZeroConf software installed on your computer

After contactless pairing of the device to the phone, and then the NFC phone to the web browser extension, an encrypted communication tunnel is then established from the devices end to end. After this last step, everything is automated.
The EviDNS ZeroConf software is a software developed by Freemindtronic. It allows to quickly find terminals such as phones, connected on the same local network. It collects the IP address and port number of the paired phone to inform the EviCypher Webmail extension.

How does it work?

The extension automatically adds buttons for contactless encryption and decryption using a Freemindtronic NFC HSM device. The extension is compatible with email client services such as Gmail and others as well as private and instant messaging services that also use a chromium-based web browser.

End-to-end encryption from human to human!

Indeed, emails always remain encrypted on the computer, phone or mail server, even when displayed on a screen.

To access the emails in clear text the user must have an NFC device and the appropriate key for encryption and decryption. If necessary, he will also have to validate the trust criteria associated with the key. Thus only the human holding the device can encrypt and decrypt the emails.
Advantageously, even if the email service is corrupted, the email always remains encrypted, whether it is received, sent or awaiting final deletion.

Decryption is performed on demand, ephemerally, in the volatile memory of the computer or phone. Thus, the plaintext message is never saved, as it is automatically deleted after reading.

The extension is published as open source on Github by Freemindtronic under the GPL-3.0 license.

The version history of the extensions is available on the following link https://freemindtronic.com/support/downloads