Introducing SecMX -- a Request For Comment (RFC) on a way to send email securely, in an analogous way to the postal system and paper mail.

Government agencies and other organisations want to be able to communicate securely with their customers using email.  SecMX offers organisations a way to ensure that an email is only sent if it can be delivered securely.  Similarly, it describes how to refuse an email, if it cannot be received securely. 

• SecMX (Level 1) secures the communication between email (SMTP) servers using Transport Layer Security (TLS).  TLS is the successor to SSL, the security protocol that is widely used to secure web pages for ecommerce.  Most email servers have TLS capability, because it is bundled with most operating systems.  SecMX (Level 1) recommends the use of TLS on a best effort basis.
  

• SecMX (Level 2) provides a way for organisations to ensure email is only sent /received securely,  if that is what they require.
  

The current SecMX RFC can be viewed here. 

We welcome your constructive feedback on how to improve SecMX, through our discussion forum.