Secure Communication

This page explains how Masaltov handles secure first-contact and how serious commercial communication should continue afterwards.

Phase 0

Web onboarding (this website)

Masaltov.bg provides a controlled-access entry point for first contact. Registration is manual and admin-approved, with variable timing.

Request Access via /register
After approval, set a password and sign in via /login
Optionally send an encrypted onboarding message to Masaltov Admin via /messages

The web channel is intended for onboarding and controlled initiation. It is not designed to replace normal commercial email.

Phase 1

Real secure email (recommended)

For ongoing commercial work, the recommended approach is encrypted email using OpenPGP (today) and potentially S/MIME (later). This gives you encryption inside your email client and works for normal business workflows.

Use an email client that supports OpenPGP (e.g., Thunderbird).
Generate your own keypair in your client (do not share private keys).
Exchange public keys and verify fingerprints.
Continue communication by encrypted email.

If your organization requires S/MIME (common in corporate Outlook environments), Masaltov will evaluate feasibility as a future step.

Guided tour: from first contact to secure commercial communication

Start on the web: submit Request Access with a clear reason and company context.
Approval: access is reviewed manually. Once approved, you can sign in via Secure Access.
Onboarding message (optional): use Secure Messages to exchange initial sensitive onboarding details.
Move to real secure email: exchange OpenPGP public keys and confirm fingerprints (recommended for ongoing work).

Key principle: private keys never leave the owner’s control. Masaltov will not request your private key.

Public keys

If a public OpenPGP key is published on this site, it will be available at /pgp. If /pgp is not available yet, use the web onboarding channel and request the key through Masaltov Admin.