Security Model & Cryptographic Guarantees
Explore the technical safeguards and privacy principles that keep your communication completely sovereign.
Envelope Encryption (AES-256-GCM)
Every mailbox is secured by a unique 256-bit Data Encryption Key (DEK) wrapped by a Master Key Encryption Key (KEK). Storage volumes cannot be read without cryptographic unwrapping.
Remote Tracker & Pixel Stripping
Conventional email clients leak your real-time IP address and location to senders via 1x1 tracking GIFs. Posera Mail neutralizes all remote image requests at the browser rendering layer.
Zero Third-Party Telemetry
No Google Analytics, no tracking scripts, no external fonts or CDN trackers. All assets and logic are bundled in a sovereign Next.js distribution.
Subdomain Sandboxing
Authentication (`auth.posera.tech`), bot verification (`verify.posera.tech`), and webmail execution (`app.posera.tech`) run on isolated subdomains, mitigating cross-site scripting risks.
Dual DKIM & Strict DMARC
Outbound messages are cryptographically signed using both 2048-bit RSA and modern Ed25519 keys, backed by strict DMARC enforcement and FCrDNS PTR verification.
Phishing Link Warning Shield
External links in incoming messages are intercepted by an interstitial security confirmation dialog that warns users of deceptive lookalike domains before navigation.