Monday, August 19, 2019

How to run Fossa Guard on Android in Firefox browser

The guideline describes how to run a free version of Fossa Guard extension V0.4.9+ on mobile Firefox browser on Android platform to enable end-to-end S/MIME encryption on top of Gmail on your mobile.

On your Android mobile:

  1. Install and run the Firefox browser
  2. Navigate to Fossa site and click 'Free Firefox version'.
  3.  
  4. Click 'Download' and then 'Open' to install the Fossa Guard extension. 
  5. Fossa Guard for Firefox is distributed as self-hosted Firefox extensions thus you need to 'Allow' the installation
  6. Give FossaGuard the following permissions:
    • Access your data for all websites to enable Certificate Revocation Lists (CRL) download following links in the certificates.
    • Access browser tabs to enable the ability to create the tab for Google's authentication and to get the response.
  7. Navigate to Fossa Guard extension via Firefox browser 'Add-ons' menu and clicks on FossaGuard extension.
  8. Select FossaGuard extension and click 'Options' in the extension details window, to get Fossa Guard settings page.
  9. Click 'Login to Extension' to associate your Google account with Fossa Guard - a new tab should appear in Firefox browser with Google authentication. 
  10.  Authenticate to corresponding Google account (we use fossa.user@gmail.com)
  11. Allow Fossa Guard to use requested permissions. On success, Google authentication will be auto-closed. 
  12.  At this point you have 2 options: Import your backup personal Certificate and key OR Enroll free personal certificate from Fossa CA.
  13.  Option with Fossa certificate enrollment is described in the blog "How to run Fossa Guard on Android" so let's import the corresponding *.p12, *.sfx file with Certificate and Private key.
  14. Navigate to the mobile web version of Gmail
  15. Ensure that you logged into Gmail with the same Google account (we use fossa.user@gmail.com).  
  16. When select one of the Inbox folders you should notice the fancy green button at the right top with 'S/MIME' label. Click it to compose S/MIME email. 
  17. Type 3 letters of your recipient address and you should get a list of corresponding contacts for selection. Fossa Guard automatically checks if the addressee has got Fossa certificate and indicates it by the green color of the email pill.
  18.  
  19. Once you finished with composing S/MIME message, click 'Send S/MIME' and it will be sent using Gmail API and should appear in Sent folder marked by the corresponding label 'S/MIME'.
  20.  
  21. Click on S/MIME labeled email to check the details and you'll discover 'smime.p7m' attachment which is unreadable for Google robots and the notification from the extension that this email was composed using S/MIME. 
  22. Click 'View Content' and you'll be requested for the passphrase to access your private key (locally within your current browser session).
  23.  
  24. Once you provide the correct passphrase the extension will decrypt the message and show you in a dedicated window.
  25. If the email address of your Gmail account does not correspond to the email address of Google account associated with the extension you'll the notification to use the same account. This is the identity check Fossa Guard makes to secure access to the private key.

Saturday, August 10, 2019

How to run Fossa Guard on Android

The guideline describes how to run a free version of Fossa Guard extension V0.4.6+ on mobile Yandex browser on Android platform to enable end-to-end S/MIME encryption on top of Gmail on your mobile.

On your Android mobile:
  1. Install and run the Yandex browser
  2. Navigate to Chrome web store and find Fossa Guard free extension
  3. Click 'Add to Chrome' and then 'Add Extension' to install the Fossa Guard extension. 
  4. Navigate to Fossa Guard extension via Yandex browser 'Extensions' menu. 
  5.   
  6. Switch to Portrait mode for convenience (work on responsive UI is ongoing).
  7. Click 'Login to Extension' to associate your Google account with Fossa Guard - a new tab should appear in Yandex browser with Google authentication. 
  8. Navigate to this tab using Yandex tabs menu. Authenticate to corresponding Google account (we use fossa.user@gmail.com)
  9.  
  10. Allow Fossa Guard to use requested permissions. On success, Google authentication will be auto-closed. 
  11. Navigate back to Fossa Guard tab to check the settings.
  12.  
  13. At this point you have 2 options: Import your backup personal Certificate and key OR Enroll free personal certificate from Fossa CA.
  14. Fossa certificate enrollment is based on the local key pair generation in your Yandex browser without sharing the private key. Certificate Signing Request (CSR) to sign certificate by Fossa CA is initiated using SSL connection over HTTP. Click 'Enroll Fossa Certificate' to initiate the flow. 
  15.  
  16. To establish a secured SSL connection over HTTP navigate to 'Fossa.me Server', log in using the same Google account and copy the one-time shared secret.
  17.   
  18. Paste shared secret at Fossa Guard extension and proceed with the enrollment. 
  19. Once signed certificate is received back from Fossa CA, the extension asks for the strong passphrase to protect your private key (which stays within your browser all the time). 
  20. Your private key will be saved into the local Yandex browser storage within your phone and will never be compromised outside it.
  21.  
  22. Once the enrollment is done you should get an invitation to start secured mailing with Gmail. 
  23.  
  24. Navigate to the mobile web version of Gmail
  25. Ensure that you logged into Gmail with the same Google account (we use fossa.user@gmail.com).  
  26.  
  27. You should notice the fancy green button at the right top with 'S/MIME' label. Click it to compose S/MIME email
  28.   
  29. Type 3 letters of your recipient address and you should get a list of corresponding contacts for selection. Fossa Guard automatically checks if the addressee has got Fossa certificate and indicates it by the green color of the email pill.
  30.  
  31. Once you finished with composing S/MIME message, click 'Send S/MIME' and it will be sent using Gmail API and should appear in Sent folder marked by the corresponding label 'S/MIME'
  32. Click on S/MIME labeled email to check the details and you'll discover 'smime.p7m' attachment which is unreadable for Google robots and the notification from the extension that this email was composed using S/MIME. 
  33. Click 'View Content' and you'll be requested for the passphrase to access your private key (locally within your current browser session).
  34. Once you provide the correct passphrase the extension will decrypt the message and show you in a dedicated window.
  35. If the email address of your Gmail account does not correspond to the email address of Google account associated with the extension you'll the notification to use the same account. This is the identity check Fossa Guard makes to secure access to the private key.


 










Tuesday, April 24, 2018

Fossa Guard V0.4.1

New V0.4.1 - free S/MIME solution for Gmail has been released to accomplish a functionality line-up with commercial Fossa Guard Pro including:


  • Private key (*.p12, *.pfx) import to have an ability to read S/MIME messages sent using previously issued identities. Note that free version allows sending S/MIME messages using only a valid Fossa certificate at the same time reading S/MIME messages is possible using any certificate (including self-signed)
  • Private key passphrase caching for fixed 10 minutes helping a User to reduce annoying passphrase manipulations.

  • Certificate re-enrollment using User's currently valid certificate instead of a shared secret. Note, that once User's certificate becomes invalid (outdated or revoked) - a shared secret will be used again to enroll a new certificate. 

Thursday, December 14, 2017

Fossa Guard Pro V0.1.9 - addressing usability.


Fossa Team is proud to announce new 0.1.9 version of Fossa Guard Pro extension for Chrome which enables end-to-end Gmail encryption and signing using S/MIME specification.

The new release includes following features:

  • Local (in-browser) self-signed X.509 certificate generation and enrollment providing a basis for end-to-end secure communication without a necessity to establish the trust to third parties.

  • Private key passphrase caching for fixed 10 minutes helping a User to reduce annoying passphrase manipulations.


  • Pre-enrolled trusted Root / Sub certificates from major vendors GlobalSign, Comodo, WISeKey, DigiCert making 3d party certificates validation simple.


Please note that Fossa Team is working on the cumulative update for free Fossa Guard extension as well.

Stay tuned!