https://tongfamily.com/2013/11/17/smime-vs-openpgp-and-self-signed-vs-cas/