dmcn protocol GitHub Read the spec
Spec Protocol Try it FAQ Go module
GitHub
The DMCN trust model in three layers. Mailbox users hold their own keys on their own devices. Domain operators each anchor a domain in a _dmcn DNS record and an offline root key, and vouch for their users' addresses. Fleet operators each anchor a fleet the same way and vouch for their relays and bridges. Domains name the fleet that hosts them. Mail from a user on one fleet goes straight to the recipient's relay on another, signed with the sender's key; fleets need no trust between them. Ordinary email is reached only through a bridge, and that link is unsigned.