Abstract: According to certain embodiments, a provisioning manager comprises an interface and processing circuitry. The interface is configured to obtain provisioning data from a provisioning database. The processing circuitry is configured to prepare one or more configuration files based on the provisioning data and provide the one or more configuration files to the one or more service instances using file distribution technology. The one or more configuration files indicate how to provision one or more service instances used in sending or receiving electronic messages.

Abstract: According to certain embodiments, a provisioning manager comprises an interface and processing circuitry. The interface is configured to obtain provisioning data from a provisioning database. The processing circuitry is configured to prepare one or more configuration files based on the provisioning data and provide the one or more configuration files to the one or more service instances using file distribution technology. The one or more configuration files indicate how to provision one or more service instances used in sending or receiving electronic messages.

Abstract: According to certain embodiments, a delivery manager comprises an interface and processing circuitry. The interface is configured to receive a certificate that a Domain Name Service (DNS) associates with a DNS name of a recipient system. The processing circuitry is configured to distribute the certificate to a plurality of sending systems. Each sending system is configured to store the certificate in a local memory of the sending system, use the certificate from the local memory of the sending system to perform encryption in response to a future determination to send an encrypted message to the recipient system, and send the encrypted message directly to the recipient system.

Abstract: According to certain embodiments, a provisioning manager comprises an interface and processing circuitry. The interface is configured to obtain provisioning data from a provisioning database. The processing circuitry is configured to prepare one or more configuration files based on the provisioning data and provide the one or more configuration files to the one or more service instances using file distribution technology. The one or more configuration files indicate how to provision one or more service instances used in sending or receiving electronic messages.

Abstract: According to certain embodiments, a delivery manager comprises an interface and processing circuitry. The interface is configured to receive a certificate that a DNS associates with a DNS name of a first endpoint. The processing circuitry is configured to distribute the certificate to a second endpoint. The second endpoint is configured to store the certificate in a local memory of the second endpoint and, in response to a future determination to establish a connection with the first endpoint, use the certificate from the local memory of the second endpoint to establish transport layer security (TLS) for the connection.

Abstract: According to some embodiments, a delivery system comprises an interface and one or more processors. The interface is operable to receive a current preference from a recipient. The current preference indicates how the recipient prefers messages to be delivered. The processors determine whether the current preference differs from a previous preference that the delivery system associates with the recipient. The interface communicates the current preference to a plurality of senders if the current preference differs from the previous preference. The senders are configured to store the current preference in local memory and to apply the current preference from local memory in response to a future determination to send a message to the recipient.

Abstract: According to certain embodiments, a delivery manager comprises an interface and processing circuitry. The interface is configured to receive a certificate that a Domain Name Service (DNS) associates with a DNS name of a recipient system. The processing circuitry is configured to distribute the certificate to a plurality of sending systems. Each sending system is configured to store the certificate in a local memory of the sending system, use the certificate from the local memory of the sending system to perform encryption in response to a future determination to send an encrypted message to the recipient system, and send the encrypted message directly to the recipient system.

Abstract: According to certain embodiments, a delivery manager comprises an interface and processing circuitry. The interface is configured to receive a certificate that a DNS associates with a DNS name of a first endpoint. The processing circuitry is configured to distribute the certificate to a second endpoint. The second endpoint is configured to store the certificate in a local memory of the second endpoint and, in response to a future determination to establish a connection with the first endpoint, use the certificate from the local memory of the second endpoint to establish transport layer security (TLS) for the connection.

Abstract: A system includes a plurality of mail encryption gateways and a router. Each mail encryption gateway encrypts email according to an encryption policy of a customer. The router stores a plurality of sender policy framework (SPF) records. The router also receives an email and compares a source IP address of the email with the plurality of SPF records. The router determines that the source IP address corresponds to an SPF record of the plurality of SPF records and in response to that determination, determines that a Simple Mail Transfer Protocol From Field of the email comprises a domain of a cloud provider corresponding to the SPF record. In response to that determination, the router determines that a Multipurpose Internet Mail Extension From Field of the email comprises a domain of a customer and in response to that determination, routes the email to a mail encryption gateway.

Abstract: A system includes a plurality of mail encryption gateways and a router. Each mail encryption gateway encrypts email according to an encryption policy of a customer. The router stores a plurality of sender policy framework (SPF) records. The router also receives an email and compares a source IP address of the email with the plurality of SPF records. The router determines that the source IP address corresponds to an SPF record of the plurality of SPF records and in response to that determination, determines that a Simple Mail Transfer Protocol From Field of the email comprises a domain of a cloud provider corresponding to the SPF record. In response to that determination, the router determines that a Multipurpose Internet Mail Extension From Field of the email comprises a domain of a customer and in response to that determination, routes the email to a mail encryption gateway.

Abstract: According to some embodiments, a delivery system comprises an interface and one or more processors. The interface is operable to receive a current preference from a recipient. The current preference indicates how the recipient prefers messages to be delivered. The processors determine whether the current preference differs from a previous preference that the delivery system associates with the recipient. The interface communicates the current preference to a plurality of senders if the current preference differs from the previous preference. The senders are configured to store the current preference in local memory and to apply the current preference from local memory in response to a future determination to send a message to the recipient.