iiinova — where your digital self keeps evolving

bmail @bmail.bsky.social · 10/10/2026

The road ahead is cracked. Stolen identities. Raided vaults. Fingerprints you can’t reset. Most of it starts the same way: a company stored something it could read. You shouldn’t have to hand over your identity to send an email and you shouldn't have to worry about them being hacked. More below 👇

100

bmail @bmail.bsky.social · 30/09/2026

Every email service caught lying about privacy said the same thing first: trust us. bmail publishes a cryptographic fingerprint of our live code & you can verify it matches our public repo. Don't trust us. Verity it yourself. Get your encrypted inbox for free at bmail.ag #bmail #DontTrustVerify

011

bmail @bmail.bsky.social · 09/09/2026

Most "we don't read your email" pledges holds up until a judge asks. That's not a character flaw, it's an architecture flaw. If the data can be read, it can be subpoenad. bmail decrypts inbound mail inside a hardware enclave. That's like a vault only you have a key to.

100

bmail @bmail.bsky.social · 25/08/2026

The safest password database is one that was never built. bmail authenticates with OPAQUE, so what you type at that login field stays on your device. The server gets a record with no password-equivalent data in it. Breach us and you get nothing, because we never asked for it in the first place. 1/2

100

bmail @bmail.bsky.social · 22/07/2026

Privacy is too important to leave up to blind trust. bmail.ag runs email in hardware enclaves that produce a signed measurement of the exact code running. Modify it and the measurement changes. That's not a policy you have to believe. It's a hash you can check.

122

bmail @bmail.bsky.social · 30/06/2026

In 2021, Swiss courts ordered ProtonMail to log a political activist's IP. They complied. They had to. The architecture allowed it. bmail's gateway runs in an SGX enclave. IPs never stored. We can't log what we can't see. Get the only verifiably private encrypted email service for free: bmail.ag

011

bmail @bmail.bsky.social · 18/06/2026

No plaintext gap, encrypted subject and metadate, anonymous payment options, anonymous "Fake ID" aliases & more. Plus: encrypted file storage & sharing, encrypted contacts, encrypted calendar & more. Get started free at bmail.ag

000

bmail @bmail.bsky.social · 18/06/2026

Your "private" email may not be as private as you think. Don't leave your privacy up to blind trust. Get the ONLY verifiably private email service: bmail.ag

100

bmail @bmail.bsky.social · 18/06/2026

Regular email is a postcard. Anyone who handles it sees the sender, the recipient, the time, and the message. bmail seals your letter inside a safe with a code only you and your recipient hold. Here is the whole idea, no jargon:

100

bmail @bmail.bsky.social · 28/05/2026

"Trust us, we don't read your email" is the same leap of faith you took with Gmail. Just dressed up nicer. bmail's servers run inside SGX enclaves. The CPU signs the exact code. You verify it. No leap required. bmail.ag #privacy #emailsecurity #privateemail #bmail

000

bmail @bmail.bsky.social · 23/05/2026

The problem isn't that the internet got hacked. The problem is that the internet was designed this way. Back doors are a feature, not a bug. #privacy #encryption Full conversation in the thread 👇

111

bmail @bmail.bsky.social · 21/05/2026

bmail uses OPAQUE, which means your password NEVER touches our servers. Not at signup. Not at login. Not ever. We cannot leak what we never had. The ONLY truly private E2E #encrypted #email, storage, calendar & contacts. Get started for free at bmail.ag 4/4

000

bmail @bmail.bsky.social · 21/05/2026

149 million login credentials. Outlook accounts. Gmail accounts. Exposed in a single database, January 2026. This is not a failure of execution. It is a failure of the model. 1/4

100

bmail @bmail.bsky.social · 19/05/2026

bmail's SGX enclave means the server that stores your email cannot read its contents. There is no plaintext to feed a model. No behavioral fingerprint to extract. AI cannot train on what it cannot see. And you can verify it all yourself. Don't trust. Verify. bmail.ag 4/4

000

bmail @bmail.bsky.social · 19/05/2026

Google's Gemini AI reads your Gmail by default. Not hypothetically. Not in a future update. Right now, as an opt-out feature you probably never turned off. 1/4

100

bmail @bmail.bsky.social · 15/05/2026

Get started for free at bmail.ag

000

bmail @bmail.bsky.social · 15/05/2026

The name is bmail. It comes from bimil. Korean for secret. If this was one or two things on the table it would be cool. It's not one or two things. It's so far ahead of every other email provider it's insane. #email #bmail #privacy #emailprivacy Full conversation in the thread 👇

121

bmail @bmail.bsky.social · 15/05/2026

Most email providers ask you to trust them. bmail doesn't ask for your trust. It let's you verify it yourself. That means you can VERIFY that your emails are kept private every step of the way. That means bmail is VERIFIABLE AF. Get it free: bmail.ag 2/2

011

bmail @bmail.bsky.social · 15/05/2026

Most "Private" email providers promise not to look. bmail built servers that make it impossible to look. That means the server processing your inbound mail can't read it. That means the operator can't be quietly compelled to log you. That means bmail is PRIVATE AF. 1/2

111

bmail @bmail.bsky.social · 14/05/2026

Privacy isn't a spectrum from "normal" to "paranoid." It's a spectrum from "trust me" to "verify me." Every other encrypted inbox is the first kind. bmail is the second. #privacy #encryptedemail #digitalrights Get a TRULY private inbox for free at bmail.ag

000

bmail @bmail.bsky.social · 14/05/2026

Which is worse: a company that reads your email and admits it, or a company that swears it can't but offers no way to verify?

100

bmail @bmail.bsky.social · 14/05/2026

Encrypted at rest means locked in storage & unlocked in RAM. Every search, sort, & delivery decrypts your email into RAM the server can read. That's the Glass Box of other email providers. bmail's SGX enclave processes email in memory the server can't read. That's the Black Box that is bmail, [1/3]

100

bmail @bmail.bsky.social · 12/05/2026

Every "Forgot Password" link s a domino waiting to fall. A helpdesk call, a phished agent, a court order, and they have the master key to your online identity, from social media to your bank. bmail breaks the chain. Your password never leaves your device. [1/3]

111

bmail @bmail.bsky.social · 11/05/2026

2007: Hushmail handed the DEA 12 CDs of decrypted emails. Their marketing said employees couldn't read user mail. Server-side encryption made that false. #email #privacy #emailprivacy 🧵 Continued in thread 👇

121

bmail @bmail.bsky.social · 10/05/2026

👽 They came a long way to read their email in peace. bmail. The only verifiably private email on this planet (or any other). 🛸 Your messages are yours alone. Get the galaxy's only TRULY private email for FREE at bmail.ag #disclosure #bmail #emailprivacy

011

bmail @bmail.bsky.social · 09/05/2026

A Swiss flag is not a firewall. If a provider can log your IP to 'monitor for abuse,' they can log it for a court order. bmail's gateway runs in an SGX enclave. IPs never written to storage. Hardware, not borders. Get the only TRULY private email for free at bmail.ag

111

bmail @bmail.bsky.social · 08/05/2026

We can't be compelled to turn over data we don't have. So we designed a service that prevents access to as much information as possible. Sign up today for the only email service built from the ground up to know as little about you as possible. bmail.ag

000

bmail @bmail.bsky.social · 08/05/2026

Tuta lost in court. The next encrypted provider will lose in court too. The only winning move is to be unable to play. To remove the operator from the chain so completely that there is nothing for a subpoena to reach. That is the architecture bmail is built on. → bmail.ag

100

bmail @bmail.bsky.social · 08/05/2026

bmail processes mail inside Intel SGX enclaves. Hardware-isolated execution. Operators cannot inject monitoring code. Any change to the code breaks a cryptographic signature anyone can verify. The only thing that survives a subpoena is an architecture where the operator can't comply. ↓

100

bmail @bmail.bsky.social · 08/05/2026

Notice the structure of every one of these cases. The court doesn't break encryption. The court orders the operator to use a capability they already have. Privacy policies are promises. Promises lose to subpoenas. The fix is not a better promise. ↓

100

bmail @bmail.bsky.social · 08/05/2026

The standard reply is "switch to a friendlier jurisdiction." It does not work. In 2021, ProtonMail was legally compelled to log a French climate activist's IP address & device fingerprint, handed to authorities through Europol. Every jurisdiction has a compulsion mechanism. ↓

100

bmail @bmail.bsky.social · 08/05/2026

Important nuance: E2EE mail was protected. Tuta could not decrypt those. What got handed over was everything else: incoming mail from non-Tuta senders before Tuta encrypted it, and outgoing mail going to non-Tuta recipients. For most users, "everything else" is most of their mailbox. ↓

100

bmail @bmail.bsky.social · 08/05/2026

Tuta appealed to the Bundesgerichtshof, Germany's Federal Court of Justice. BGH ruled: it doesn't matter if you're a telecom. If you provide an "over-the-top" communications service, you can be compelled to assist with surveillance under §100a of the Code of Criminal Procedure. ↓

100

bmail @bmail.bsky.social · 08/05/2026

A Tuta account was used to send extortion threats. The Cologne Regional Court ordered Tuta to release all unencrypted incoming and outgoing mail for that account, going forward. Tuta's response: we are not a telecom, and we should not be subject to telecom surveillance law. The court disagreed. ↓

100

bmail @bmail.bsky.social · 08/05/2026

In 2020, a German court ordered an encrypted email provider to hand over a user's plaintext mail. Tuta fought it. In 2021, Germany's highest court ruled they had to comply. A thread on what actually happened, and the only thing that could have prevented it. 🧵

110

bmail @bmail.bsky.social · 07/05/2026

We can't read your mail. Not "won't." Can't. Get the world's first verifiably private email service at bmail.ag [2/2]

000

bmail @bmail.bsky.social · 07/05/2026

A Privacy Policy is a pinky promise made by the people who hold your keys. Court orders adjust promises. Rogue employees ignore them. bmail's hardware enclave seals your data from us entirely. We cannot break a promise we were never in a position to keep. #protonmail #tuta #emailprivacy [1/2]

111

bmail @bmail.bsky.social · 06/05/2026

bmail offers a fully anonymous double blind voucher system which makes it impossible to link payment information with a user account. Try it free today at bmail.ag bmail.ag

000

bmail @bmail.bsky.social · 06/05/2026

Proton Mail handed the FBI a bank card identifier that unmasked an anonymous Stop Cop City activist account. Encryption was never broken. Billing metadata did the work. 🧵 Link to source in thread 👇

121

bmail @bmail.bsky.social · 05/05/2026

Every email you receive is unwrapped on your provider's server before it gets stored. Plain text. In memory. Readable by staff, governments, and hackers alike. bmail processes email inside a CPU-sealed SGX enclave. Your mail is never exposed. Not for a nanosecond. Not to anyone. bmail.ag

011

bmail @bmail.bsky.social · 04/05/2026

No SGX is invulnerable. Side channels exist. The claim is narrower: compromise can't happen without leaving evidence anyone can check. That's the entire point. Verify, don't trust. Try it free at bmail.ag [7/8]

100

bmail @bmail.bsky.social · 04/05/2026

The enclave code is reproducibly built, and the running MRENCLAVE measurement is publicly verifiable via remote attestation. Any modification, including a compelled one, changes the measurement. Operators can't comply silently with a surveillance order. Compliance leaves cryptographic proof. [6/8]

100

bmail @bmail.bsky.social · 04/05/2026

bmail's design assumes this trust failure is a structural feature, not a bug. Inbound TLS keys live inside SGX enclaves and are pinned via DANE/TLSA records in DNSSEC-signed DNS. Senders that validate DANE reject any cert not matching the pin. [5/8]

100

bmail @bmail.bsky.social · 04/05/2026

DigiCert states the affected certs were revoked within 24 hours, with revocation timestamps backdated to issuance. That's a reasonable response. It's also entirely self-reported. There's no external verification of which orders were cancelled or what window "of interest" actually means. [4/8]

100

bmail @bmail.bsky.social · 04/05/2026

When a CA is compromised, there's no independent mechanism for users to verify the timeline, scope, or response. Certificate Transparency helps post-hoc but doesn't prevent initial interception. You're trusting the CA's own incident report, which is itself a press release. [3/8]

100

bmail @bmail.bsky.social · 04/05/2026

Code signing was the vector exercised this time, but the same social engineering path applies to TLS issuance. Every email provider on the internet relies on the CA system to authenticate their servers to clients. That trust chain has no client-side verification of the issuance process. [2/8]

100

bmail @bmail.bsky.social · 04/05/2026

DigiCert filed an incident report on Mozilla Bugzilla over the weekend. An attacker phished a customer support employee and used the access to procure initialization codes for code signing certificates. Some signed malware before detection. Disclosed by a third party, not self-discovered. [1/8]

111

bmail @bmail.bsky.social · 03/05/2026

Roast time. Drop your email provider in the comments and I'll tell you exactly how "private" it actually is. Proton, Tuta, Gmail, Yahoo, AOL, Outlook, Fastmail. No one's safe. #ProtonMail #Tuta #Fastmail #Gmail #Outlook

121

bmail @bmail.bsky.social · 02/05/2026

Most email is a postcard. Readable by everyone who touches it. bmail is a safe. Your message is encrypted before it leaves your browser. If there is a key for us, there is a key for the government. We don't have the key 🤷‍♂️ Try the only TRULY private email today for free at bmail.ag

111

bmail @bmail.bsky.social · 01/05/2026

Until now, "private" email meant trusting a human at the company not to peek during the plaintext gap. That era is over. And you can verify it yourself. Introducing bmail: the first TRULY private email service, built by @vpnet_official. #EncryptedEmail #PrivateEmail 🧵 Continued in thread ⬇️

242