-
Stalwart Mail vs. ProtonMail: A Technical Deep Dive into Modern Email Security & Deliverability
For organizations and technically-minded individuals prioritizing privacy, ProtonMail has long been the gold standard for End-to-End Encrypted (E2EE) email. However, as organizations scale, the desire for data sovereignty and infrastructure control often leads engineering teams to explore self-hosted solutions. Enter Stalwart Mail, a modern, open-source, and highly scalable mail server written in Rust. Its robust…
-
Matrix for E2E Encrypted Chat in the “Chat Control” Age
In an emergency session of the European Parliament on July 9, 2026 right before the summer recess, Chat Control 1.0 was approved. The motion restored the authorization of Big Tech companies, including Discord, Google, Meta, Microsoft, and Snap, to voluntarily scan & moderate non-E2EE messages on their platform using dragnet surveillance tools – which would…
-
Sovereign Email Simplified: Insights from Deploying Stalwart Mail
Deploying a self-hosted email server used to be a daunting task involving complex configurations across Postfix, Dovecot, and SpamAssassin, often feeling like a full-time job. However, modern solutions like Stalwart Mail have dramatically simplified this experience, offering an all-in-one, secure, and highly performant email server. In this post, we’ll share our technical insights and “gotchas” from integrating…
-
The Zero-Knowledge Perimeter: Operating a Hardened Layer 4 Reverse Proxy for Untrusted Edge Environments
In high-stakes infrastructure defense, the standard architectural assumption is that the public-facing edge server—the node terminating your SSL/TLS certificates and inspecting visitor traffic—must be fully trusted. Whether utilizing a massive corporate content delivery network or a dedicated Virtual Private Server (VPS) in a privacy-respecting jurisdiction, the edge node typically handles unencrypted application data, session tokens,…
-
Bypassing Google and Apple: Implementing True De-Googled Push Notifications with UnifiedPush and ntfy
When engineering a sovereign communication stack, the most difficult architectural hurdle is rarely the chat protocol itself. The true weakest link for metadata leakage is the push notification pipeline. Historically, mobile operating systems have forced developers into a centralized paradigm. If a message arrives on your private server, that server has to ping Google’s Firebase…