Uses MD5 for passwords and Triple DES for actuall encrypting. Encrypting and decrypting is happening on user machine, only cipher is sent over Internet. Requirements: Both sender and recipient must know password. Recipient must use IE to decode message.