Every GenMail address is bound to exactly one current public key in an append-only, publicly auditable transparency log. If a message's signature doesn't match what the log says right now, that's not a cosmetic warning — it's the system telling you someone is spoofing.
A real Merkle-log key directory (Google Trillian) — not a keyserver anyone can upload to. Every client can independently verify an inclusion proof before trusting a key.
Messages are sealed with HPKE (RFC 9180) to the recipient's current key and signed with Ed25519 — decrypted and verified entirely on-device.
The relay only ever sees a delivery token and a padded blob — reached over a real Tor v3 hidden service, bundled directly into the desktop app.
A native client — not a browser tab — with Tor bundled in so it can reach the relay directly.
↓ Download for macOS (Apple Silicon)