A mail server run to spec.

SnappyMail is a privately operated mail service. Every message is authenticated on the way in, signed on the way out, and carried over encrypted transport, with no third-party relay, no message scanning, and no advertising anywhere in the stack.

Inbox 4

Starred

Sent

Drafts

Re: Thursday's site visit

Today at 09:41

That works for me. I will bring the survey notes and the revised floor plan with me.

Shall we say half past ten at the front entrance? Parking is easier before eleven, and it gives us a clear couple of hours before the contractors arrive.

Aoife BrennanSite manager, Brennan and Cole

Invoices

[email protected]

Invoice 10428 is ready

Today at 08:15

Your invoice for August is ready to view in your account.

Payment of £248.00 is due on 26 August. If you pay by card, the balance is collected automatically on the due date and there is nothing for you to do.

Sent automatically. Replies are read during office hours.

Domain renewals

[email protected]

Your domain renews in 30 days

Yesterday at 16:20

Your domain is due to renew on 11 September and will do so automatically.

No action is needed. If you would rather cancel the automatic renewal, you can do so at any point before the renewal date.

You are receiving this because you hold the registration for this domain.

Account security

[email protected]

New sign-in from a new device

Monday at 22:04

Someone signed in to your account from a device we have not seen before.

Chrome on macOS, London, United Kingdom, at 22:04 on 11 August.

If this was you, no action is needed.

Sent automatically whenever a new device signs in.

What the servers say to each other

SMTP session - C client / S server

Accepted in 41 ms | TLS 1.3 | SPF pass | DKIM pass | DMARC pass

That is the real conversation another mail server has with ours when it delivers you a message. It opens, proves who it is, hands over the mail and hangs up, all in less time than it takes to blink.

250
Delivery path

What happens to a message

220

Connection

Transport is encrypted before any message data moves. Inbound mail upgrades through STARTTLS, and submission on 465 and 587 is encrypted from the first byte.

250

Identity

SPF, DKIM and DMARC are checked on everything arriving and applied to everything leaving. Mail that fails alignment is refused at the edge, not filed in a folder.

354

Content

Bodies pass through malware and spam analysis before reaching a mailbox. Filtering runs on the server itself, so nothing goes to an outside classifier.

250 2.0.0

Delivery

Accepted mail is written to encrypted storage and is readable over IMAP straight away. The whole exchange typically finishes inside 50 ms.

AUTH
Published policy

Configured to current standards

Mechanism	Published value
SPF	v=spf1 mx -all
DKIM	2048-bit RSA, selector s1
DMARC	p=reject; adkim=s; aspf=s
MTA-STS	mode=enforce; max_age=604800
TLS reporting	enabled
DNSSEC	signed zone
Transport	TLS 1.3, TLS 1.2 minimum
Ports	25 \| 465 \| 587 \| 993

OPS
How it is run

Operated directly, not resold

Single tenant

The domain runs on dedicated infrastructure that hosts nothing else. There is no shared relay pool, and no co-tenant reputation to inherit when someone else misbehaves.

Encrypted at rest

Mail stores sit on encrypted volumes. Snapshots are taken daily, held off-site, and kept for thirty days before they are destroyed.

Nothing is read

Messages are never scanned for advertising, profiling or model training. This page carries no analytics, no cookies and no third-party requests of any kind, including its typefaces, which are the ones already on your device.