Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

There are quite a few SSL certificate companies out there that offer free email S/MIME certificates. There are also paid versions as well. I need about 6 email certificates for some company email addresses (the company has yet to start trading hence the requirement to keep costs low) so what advantages does getting paid certificates have over the free certificates?

If it matters I use Microsoft Exchange Online as my email provider and use Outlook 2013 and Thunderbird as my email clients.

share|improve this question
up vote 3 down vote accepted

If you have confidence in the security and policies of the company issuing the certificate (that they would not issue one to someone else for addresses in your domain) there should be no difference. Most of these shops offer the free e-mail certificates as a way to advertise to you for Web server certificates and the like. Many of the paid offerings provide insurance against anyone else getting your certificate through the company's error or by hacking their servers, and then impersonating you.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.