End-to-end email encryption using a public key distribution framework

A computer-implemented method for email processing, the method comprising:

• receiving an email for transmission to a recipient, the email specifying a recipient email address;
• determining, from the recipient email address, a recipient domain portion, wherein the recipient domain portion is a portion of the recipient email address following an “@” symbol;
• querying at least one Domain Name System (DNS) record based at least in part on the recipient domain portion to obtain DKA addressing information that identifies a Domain Key Authority for the recipient email address (recipient DKA), wherein the recipient DKA is configured to serve a recipient public key whose association with the recipient email address has been verified using a verification process that verifies control of the recipient email address;
• transmitting a public-key request for the recipient public key to the recipient DKA;
• receiving the recipient public key from the recipient DKA;
• and
• encrypting at least a portion of the content of the email based at least in part on the recipient public key.

A non-transitory computer-readable storage medium storing instructions that, when executed by one or more processors of an email system, cause the email system to:

• receive an email for transmission to a recipient, the email specifying a recipient email address;
• determine, from the recipient email address, a recipient domain portion, wherein the recipient domain portion is a portion of the recipient email address following an “@” symbol;
• query at least one Domain Name System (DNS) record based at least in part on the recipient domain portion to obtain DKA addressing information that identifies a Domain Key Authority for the recipient email address (recipient DKA), wherein the recipient DKA is configured to serve a recipient public key whose association with the recipient email address has been verified using a verification process that verifies control of the recipient email address;
• transmit a public-key request for the recipient public key to the recipient DKA;
• receive the recipient public key from the recipient DKA;
• and
• encrypt at least a portion of the content of the email based at least in part on the recipient public key.