How Mailiverse Works (__VERSION__)

FAQ

  • Why is Mailiverse different from all the other web mail services?
    After mail has been received, encrypted and relayed to your store, Mailiverse cannot read your mail. This means Mailiverse cannot profile you, cannot reveal information, cannot sell information. Mailiverse is here to provide you with a mail service, not mine data for advertising.
  • Can people read my e-mail by snooping on the wifi?
    No. No mail nor caches are ever transmitted so that others can read them. That's the whole point of this service.
  • Can people read my e-mail by snooping on my computer?
    Yes! Do not ever enter your password on a computer which potentially has a key logger. We cannot protect you if your computer has been compromised, nor if your keystrokes are monitored.
  • Is there any way I can check that things are encrypted?
    Open Chrome/IE/Firefox and turn on the respective debuggers. Watch the network requests which take place and read the contents of the responses. Trace through their respective decryption.
  • How strong is this encryption?
    We use 2048 bit RSA keys (RSA-AES-CBC-256-PKCS7) to encrypt your mail. (Wikipedia:RSA).
    We use AES-CBC-256-PKCS7 to encrypt caches. (Wikipedia:AES).
  • How is my mail encrypted?
    When mail is received by the Mailiverse server it is encrypted with the your RSA Public Key. This keeps your mail so that only you can read it.
  • How can I read my mail if it is encrypted?
    When you login via the web, you authenticate with our server and receive your encrypted RSA Key block.
    You decrypt this key block and use the embedded keys to read and cache your mail - in javascript on the client - no server is involved.
  • If a government or law enforcement agency asks Mailiverse for my e-mail will you give it to them?
    Yes. Mailiverse will give them any information as required by law. But it doesn't matter. Here is why:
    Mailiverse's authentication scheme is setup in a way that Mailiverse cannot read your mail. Nor can anybody else.

    That is the whole point of this service: no more profiling corporation, no more big brother.

Read the technical version for more details.