Public Key Infrastructure: PKI Components and Email Security
This paper examines Public Key Infrastructure (PKI) as a framework for securing email communications in business environments. It explains the core components of PKI — including digital certificates, certificate authorities (CAs), public and private keys, and digital signatures — and describes how each contributes to authentication and data integrity. The paper also evaluates the practical decision companies face when choosing between hosting an in-house CA versus outsourcing to a public CA, weighing factors such as cost, control, liability, and operational capacity. The author ultimately recommends outsourcing to a trusted public CA as the more cost-efficient solution for most organizations.
- Introduction to Public Key Infrastructure: Defines PKI and its core security components
- Digital Certification: Explains digital certificates and how they work
- Certificate Authority: Describes the role and function of a CA
- In-House vs. Public Certification Authority: Compares cost, control, and liability of each model
- Recommendation and Conclusion: Recommends outsourcing to a public CA
✍️ How to write this paper — guide, tools & examples ▾
What makes this paper effective
- Clearly defines each PKI component before explaining its function, giving readers a logical foundation to build on.
- Moves methodically from technical concepts (digital certificates, CAs) to a practical business decision (in-house vs. outsourced CA), connecting theory to real-world application.
- Ends with a concrete recommendation supported by cost and liability reasoning, demonstrating applied analysis rather than pure description.
Key academic technique demonstrated
The paper demonstrates a compare-and-contrast analytical structure when evaluating in-house versus public CA implementation. Rather than simply describing both options, it identifies specific decision criteria — cost, control, liability, and operational capacity — and uses those criteria consistently to weigh each option, culminating in a justified recommendation. This technique is useful in any technology or business policy paper where a practical decision must be defended.
Structure breakdown
The paper opens with a brief introduction establishing why PKI matters for business email security. It then defines and explains two key PKI components — digital certification and certificate authorities — in dedicated sections. The final substantive section compares in-house and outsourced CA models across multiple criteria. A short concluding recommendation ties the analysis back to the practical needs of a typical organization.
Introduction to Public Key Infrastructure
Email communication has increased strongly in recent years and continues to grow. It is hard to find a company that does not use email to run its business processes — both internally and with external partners and clients. For this reason, the security of a company's network infrastructure and the confidentiality of its data should be a priority. The use of Public Key Infrastructure (PKI) can significantly reduce this threat. PKI can be defined as the use of a public and private key pair for authentication and proof of content (H. Johner, 2010).
PKI combines hardware, software, policies, and procedures to deliver strict security regulation. A public key infrastructure is commonly referred to as a certificate and functions as a form of digital identification. It provides assurance regarding the quality of information sent and received electronically, as well as the identity of the source and destination. Information secured with a PKI certificate can even be used as evidence in legal proceedings (IQ Suite, 2009).
There are several components of PKI used to maintain high security for emails and other data within a company. These include encryption, digital signatures, public keys, private keys, digital certificates, certificate authorities, certificate revocation, and secure storage. Together, these elements protect the content of data and information being transmitted (IQ Suite, 2009).
References
IQ Suite (2009). Public-Key Infrastructures and the Encryption Methods PGP and S/MIME. PKI Fundamentals.
Adonis (2005). An Introduction to PKI (Public Key Infrastructure). Articsoft. http://www.articsoft.com/public_key_infrastructure.htm
Bob Walder (2009). In-house or out: how to start building a PKI.
Create your account
Always verify citation format against your institution’s current style guide requirements.