https://gorokhov.dev/tags/security/Recent content in Security on Vlad GorokhovHugoen-usMon, 31 Aug 2026 00:00:00 +0000https://gorokhov.dev/posts/key-transparency-self-audit/Mon, 31 Aug 2026 00:00:00 +0000https://gorokhov.dev/posts/key-transparency-self-audit/<p>An encrypted email can arrive in the right inbox after someone else has already read it.</p> <p>The cryptography is still doing its job. The mistake happens earlier, when the client receives the wrong public key.</p> <p>I am building <a href="https://thelemail.com" target="_blank" rel="noopener noreferrer">Thelemail</a> , private email hosting for people and small teams using their own domains. Stored mail remains encrypted, and readable private-key material stays on each user&rsquo;s device.</p> <p>Thelemail has to solve public-key distribution too. A sender needs the correct key for the intended recipient. Give the sender a different one and the message is encrypted correctly for the wrong person.</p>