A certificate-based standard for email signing and encryption built on PKI trust and X.509 identities.