midusmail MX 10 mx1.osl.midusmail.com  MX 20 mx2.ber.midusmail.com

Email services for select clients.

SMTP, IMAP and JMAP on hardware we own, in private facilities in Norway. Accounts are issued, never sold.

Operating since
2016
Open to new accounts
No
Postmark, struck in gilt.Strike it again.

protocol

Four things happen to a message. Nothing else does.

  1. Received

    TLS 1.3 or the connection is refused. We never downgrade to plaintext to be polite.

  2. Assayed

    SPF, DKIM, DMARC and ARC checked on arrival. Failures are held, not junked, and listed for you once a day.

  3. Sealed

    Encrypted to a key made on your own device. We store ciphertext and a date.

  4. Delivered

    Over IMAP or JMAP. No webmail, no link rewriting, no remote images fetched on your behalf.

security

Where the keys are.

Held

  • Sealed messagesciphertext, until you delete it
  • Server signing keysin hardware, never exported
  • Delivery timestamps30 days, then gone
  • Rack keystwo staff, signed out by hand

Not held

  • Your private keymade on your device, kept there
  • Plaintextnever written to disk
  • Connecting IP addressesdropped at session end
  • Remote accessnone, changes are made on site

accounts

Every account is spoken for.

New accounts are issued only when a rack is added, and the last rack went in during 2024. There is no queue and no list to join.

When capacity opens, existing holders are asked whom they would vouch for.