The launch of **Rootshell**, an Iceland-based email service marketed as "End-to-End Encrypted" (E2EE), has been met with heavy skepticism and technical criticism from the Hacker News community.
Key points of contention include:
* **Questionable Security:** Experts argue the service’s E2EE claims are misleading, as emails appear to be decrypted on the server rather than the client. Many note that true E2EE in email is impossible without external protocols like PGP.
* **Technical Failures:** Users reported significant friction during registration, including vague error messages and failed account creation.
* **Operational Concerns:** Technical reviewers pointed out flaws in the service’s implementation, including broken DANE/HSTS configurations, insecure TLS settings, and a failure to block sensitive mailbox names (e.g., `abuse@`, `postmaster@`), which poses a significant security risk.
* **Vibe-coding:** Commenters are concerned that the service was built using LLMs without proper oversight or third-party audits, leading to a product that lacks technical robustness.
Overall, the consensus suggests that Rootshell is an immature project that currently lacks the security, reliability, and architectural transparency required to be a viable private email provider.