ends2ends.com

What It Is

ES2ES is an Outlook email security tool from Department C Incorporated, designed to enable “global, cross-organization” end-to-end encrypted email. Rather than reinventing the email client, it uses Outlook’s native S/MIME capabilities, stores recipients’ public email certificates in DNS, and relies on an ES2ES gateway/local plugin to query and validate them. This addresses a common obstacle before sending encrypted email: not having the recipient’s public key.

Core Capabilities

In terms of protection, ES2ES focuses on email content encryption and S/MIME certificate distribution. The text explicitly mentions DNSSEC validated S/MIME certificate distribution, with support for RSA, ECDSA, and Ed25519. Deployment is fairly technical: users download and run es2es.exe, add an LDAP 127.0.0.1 address book in Outlook, then restart Outlook and try sending encrypted email to a test mailbox. To allow others to send encrypted email to you, you also need to generate a long DNS record via a signed test email and add it to your own DNS. For logging, it creates es2es.exe.log, where the DNSSEC validation process can be viewed. However, there is no clear mention of enterprise controls such as centralized management, alerting, or policy auditing.

Pricing and Compliance

The captured page content does not disclose commercial pricing, licensing model, payment methods, trial limitations, or enterprise support plans. There is also no information on compliance certifications such as ISO 27001, SOC 2, GDPR, or China’s MLPS. The text mentions that free S/MIME credentials can be obtained from Actalis, but that is a third-party certificate source and should not be treated as ES2ES pricing or certification.

Pros and Cons

The main advantage is that its technical approach directly addresses a key adoption barrier for S/MIME: using DNS as a global directory, combined with DNSSEC validation, could in theory make cross-organization encrypted email more automated. It also remains compatible with Outlook’s existing S/MIME ecosystem. The drawbacks are also clear: users need to understand certificates, DNS, DNSSEC, LDAP, and Outlook address book configuration. The website presents the information in a way that feels less productized, and even includes scraped executable binary fragments. The installer may also trigger a “Run Anyway” prompt, which increases evaluation overhead for both ordinary users and enterprise security teams.

Who It’s For and Access from China

ES2ES is better suited to security teams, technical organizations, or email encryption research scenarios where users already have an Outlook/S/MIME foundation, can manage DNS records, and are willing to validate DNSSEC. If you simply want a quickly deployable managed secure email solution, Microsoft Purview Message Encryption, Virtru, Proton Mail, Tutanota, or an enterprise S/MIME gateway may be easier to implement. There is no evidence in the source text regarding access from mainland China, network connectivity, or payment methods, so these remain unknown.