Rootshell:一项托管于冰岛的端到端加密电子邮件服务
Rootshell: A new E2EE email service hosted in Iceland

原始链接: https://rootshell.is

您好,请提供您需要翻译的具体内容。

The launch of **Rootshell**, an Iceland-based email service marketed as "End-to-End Encrypted" (E2EE), has been met with heavy skepticism and technical criticism from the Hacker News community. Key points of contention include: * **Questionable Security:** Experts argue the service’s E2EE claims are misleading, as emails appear to be decrypted on the server rather than the client. Many note that true E2EE in email is impossible without external protocols like PGP. * **Technical Failures:** Users reported significant friction during registration, including vague error messages and failed account creation. * **Operational Concerns:** Technical reviewers pointed out flaws in the service’s implementation, including broken DANE/HSTS configurations, insecure TLS settings, and a failure to block sensitive mailbox names (e.g., `abuse@`, `postmaster@`), which poses a significant security risk. * **Vibe-coding:** Commenters are concerned that the service was built using LLMs without proper oversight or third-party audits, leading to a product that lacks technical robustness. Overall, the consensus suggests that Rootshell is an immature project that currently lacks the security, reliability, and architectural transparency required to be a viable private email provider.
相关文章

原文
联系我们 contact @ memedata.com