huginn.email

Decentralized email that forgets everything except how to deliver.

Zero-Knowledge Gateway

The server is a relay, not a mailbox. It forwards encrypted blobs and immediately forgets them. No storage, no logs, no metadata retention.

End-to-End Encrypted

Messages between huginn.email users are sealed with post-quantum hybrid encryption (X25519 + ML-KEM-768). The gateway never sees plaintext.

Peer-to-Peer Delivery

When both users are online, messages skip the gateway entirely. A lightweight DAG blockchain handles key discovery and relay announcement.

No Identity Linking

Handle registration uses blinded hashes. The server knows a handle exists but cannot link it to a user account. On seizure, it yields nothing useful.

External Compatibility

Send to and receive from any email address. External mail arrives via standard SMTP with TLS. Outbound mail is DKIM-signed and SPF-verified.

Built on Huginn

Named after the Norse raven who flies the world gathering intelligence and reporting back. Your messages travel far but answer only to you.

How It Works

1

Claim your handle

Choose a username in the HH Mail app. It's registered as a blinded hash — the server can't reverse it.

2

Keys publish automatically

Your encryption keys are published to 3 independent servers. Recipients need 2-of-3 agreement to trust them (no single point of compromise).

3

Send and receive

To other huginn.email users: sealed end-to-end, optionally peer-to-peer. To everyone else: standard email with DKIM, SPF, and TLS.

Email Authentication

huginn.email passes all standard email authentication checks.

SPF — pass
DKIM — pass
DMARC — reject policy
STARTTLS — enforced
MTA-STS — enforce mode
CAA — Let's Encrypt only
Get HH Mail

huginn.email addresses are available to all HH Mail users. Free.