<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Implementing Email Encryption

## openssl — TLS and Certificate Operations
```bash
openssl s_client -starttls smtp -connect mx.example.com:25 -brief
openssl req -new -newkey rsa:2048 -nodes -keyout user.key -out user.csr
openssl pkcs12 -export -in user.crt -inkey user.key -out user.p12
```

## gpg — PGP Operations
```bash
gpg --full-generate-key
gpg --encrypt --recipient user@example.com --armor message.txt
gpg --verify signed_message.asc
```

## dig — DANE/TLSA Records
```bash
dig TLSA _25._tcp.mx.example.com +short
```
