Today's Deep-Dive: Chatmail
Ep. 255

Today's Deep-Dive: Chatmail

Episode description

Chat Mail is a project aiming to revolutionize email by making it secure, instant, and interoperable. It is an open-source community project focused on providing infrastructure for secure and instant email messaging. Key features include automatic end-to-end encryption and metadata minimization, ensuring privacy without complex setups. The project consists of the Chat Mail core library, which handles secure communications on user devices, and Chat Mail relays, which transmit encrypted messages without storing them. The core library is written in Rust and supports various programming languages, making it accessible for developers. Chat Mail relays are cost-effective and simplify operations by avoiding the need for complex spam filtering. While interoperability with non-Chat Mail clients is limited, the project aims to bridge this gap through open standards and easy-to-use libraries. Practical applications include secure alert systems, anonymous reporting, and integrations with existing chat platforms. The project contributes to the open-source ecosystem by fixing bugs in dependent libraries. Overall, Chat Mail reimagines email as a private, instant messaging backbone, offering new possibilities for secure and decentralized communication.

Gain digital sovereignty now and save costs

Let’s have a look at your digital challenges together. What tools are you currently using? Are your processes optimal? How is the state of backups and security updates?

Digital Souvereignty is easily achived with Open Source software (which usually cost way less, too). Our division Safeserver offers hosting, operation and maintenance for countless Free and Open Source tools.

Try it now for 1 Euro - 30 days free!

Download transcript (.srt)
0:00

Welcome curious minds to another deep dive. We all use email, right? It's kind of

0:05

the digital backbone for everything we do online

0:07

But let's be honest. Sometimes it feels a bit

0:09

Well old clunky maybe and privacy not always great and it's definitely not instant

0:17

like the chat apps

0:17

We're all used to now, but what if what if email could be all those things fast

0:21

secure instant, but still keep its global reach

0:24

That's the really interesting idea behind a project called chat mail and that's

0:28

what we're digging into today

0:29

Now before we properly jump in a quick word from our valued supporter

0:32

This deep dive is brought to you by safe server safe server handles hosting for

0:37

software like this and supports you in your digital transformation

0:39

They really help make the digital world more robust and accessible to find out more

0:43

just visit

0:44

www.safeserver.de

0:46

Okay. So our mission today is to really unpack chat mail

0:49

We want to explore what it is how it works under the hood because the tech is

0:52

fascinating and you know

0:54

Why it actually matters for how you communicate online? We've got their github

0:57

repository their project website to guide us

0:59

So yeah, get ready to maybe rethink email a bit. Alright, let's get into it. Chat

1:03

mail isn't like just another messaging app popping up

1:06

It's more of a whole new approach aiming to fundamentally change how we even use

1:10

email at its heart

1:11

It seems to be about making email. Well exciting again secure instant tackling

1:16

those big frustrations

1:17

We all have exactly and what's really fascinating. I think is that it's a community

1:21

project. It's free and open source software F OSS

1:24

Their main goal is providing these infrastructure templates and libraries for and

1:29

this is their phrase interoperable and secure instant email messaging

1:33

So interoperable is key designed to work across different systems

1:37

no more walled gardens ideally and it's built on these two huge principles

1:41

automatic end-to-end encryption and

1:43

metadata minimization

1:45

Okay

1:46

Automatic end-to-end encryption that jumps out immediately because usually getting

1:49

proper email encryption involves like PGP keys and complicated setups

1:53

Doesn't it you saying chat mail just does it it just does it for you the user?

1:58

It means your messages are private from your device to the recipients device

2:03

automatically

2:03

No fiddling required is designed in from the start and the metadata minimization is

2:08

just as important

2:09

Really?

2:10

It means cutting down massively on the data about your communication who you talk

2:14

to when how often that stuff can be really revealing

2:17

Plus they offer optional ephemeral peer-to-peer messaging too, which brings in real-time

2:22

data

2:23

Multi-device setups it pushes the privacy and the speed even further. It gives you

2:27

control, right?

2:28

So it's keeping the good bits of email that global decentralized network, but

2:32

injecting it with modern chat features

2:34

security speed and

2:36

Being open source is a big plus too. That really is a different way of thinking

2:40

about email compared to you know

2:41

Just your standard inbox. Okay, so that's the big picture. But how how do they

2:44

actually achieve this?

2:46

It sounds almost too good to be true for standard email protocol. Well, yeah, the

2:49

how is where the clever engineering really shines

2:52

It's built on two main pillars. You've got the chat mail core library, and then you

2:55

have the chat mail relays

2:56

Hmm. The core is basically the engine running on your end on your device. That's

3:01

what handles making things instant secure locally

3:04

Okay, let's dig into the core first them this chat mail core library

3:08

What's it doing on my phone or computer to make all this happen? So chat mail core

3:13

is this robust cross-platform library?

3:16

It's written mainly in rust. Ah

3:18

Rust known for performance and safety exactly a smart choice when you're dealing

3:22

with secure communications

3:24

This library is what apps or bots integrate to actually participate securely in

3:29

this

3:29

Enhanced email network because of all those instant secure features directly and it

3:34

handles a lot of complex stuff quietly in the background

3:37

So you don't have to worry about it like secure TLS set up for encrypting the

3:40

connection to the server

3:41

That's table stakes, but it includes advanced things like DNS caching and a proxy

3:45

support to for speed and privacy

3:47

It manages robust SMTP and IMAP handling the basic email protocols, but makes them

3:52

more reliable

3:53

It ensures safe handling of MIE which structures emails and open PGP for encryption

3:59

standards

3:59

making sure it's all parsed and built correctly and securely and

4:02

Crucially, it implements security audited end-to-end encryption

4:06

It uses protocols like RPGP auto crypt secure join making sure messages are private

4:11

without you needing to configure anything

4:13

Wow, and then there's the really innovative part ephemeral peer-to-peer networking

4:17

using something called IRO

4:19

This allows for super fast multi-device sync and real-time data like for these

4:23

little web apps called WebEx DC

4:25

It means instant communication without always needing a central server

4:28

It even includes a tested PDP group chat protocol that works without needing server

4:33

state which is a huge privacy win for groups

4:35

Okay. Wow, that is a ton of heavy lifting happening right there on the device

4:39

It's like putting the intelligence at the edge, isn't it?

4:41

So that covers my end, but what about the messages journey after it leaves my

4:44

device?

4:44

That's where the cat mail relays come in. You said these sound different from

4:47

regular mail servers. Oh, they are fundamentally different

4:50

Yeah, this is where chat mail really rethink the infrastructure

4:54

The chat mail relay software helps deploy a minimal mail transfer agent an MTA

4:59

Oh, but and this is the critical difference

5:02

These relays only transmit messages that are already end-to-end encrypted and

5:07

metadata minimized

5:08

They provide ephemeral transport only they don't store your messages long-term ephemeral

5:13

transport

5:13

So they're like a super secure courier that just passes the package along instantly

5:17

and doesn't keep a copy or even know what's inside

5:19

That's what drastically different from my standard email server that keeps

5:22

everything forever. What does that mean practically huge benefits?

5:25

Especially for cost and efficiency for you or anyone running one. It means these

5:30

relays are incredibly cheap to operate

5:32

They estimate something like half a cent per user per year for a hundred thousand

5:36

users

5:36

Yeah, and almost zero admin cost after setup half a cent. Seriously. Seriously.

5:41

Think about that small communities journalists

5:44

Activists they could potentially run their own secure infrastructure for next to

5:48

nothing

5:49

That's a massive shift away from relying on big centralized providers

5:53

It's about digital sovereignty and because they only handle encrypted traffic. They

5:57

don't understand

5:58

They completely ditch the need for all that complex IP reputation stuff and spam

6:02

filtering machinery

6:05

Which simplifies operations massively. Yeah

6:08

It also means apps using chat mail can send messages instantly without hitting the

6:12

usual email server rate limits that choke

6:14

Traditional systems trying to do real-time stuff got it. So the picture I'm getting

6:18

is

6:19

It's like they built this high-tech super secure express lane on top of the

6:24

existing global email highway

6:26

It's designed just for this instant private traffic the old lanes still there, but

6:30

this one's optimized

6:30

But how does that express lane interact with the regular highway?

6:34

Surely there must be some friction or challenges integrating this right? It can't

6:38

be perfectly smooth talking to older systems

6:40

That's a really good point interoperability is always a challenge while chat mail

6:45

uses email standards

6:47

The fact that messages are automatically end-to-end encrypted means a classic non

6:52

chat about client won't understand them

6:54

It'll just see encrypted gibberish and it won't get the real-time P2P benefits

6:58

either

6:58

So the main hurdle isn't so much technical resistance from the email system itself

7:03

But rather getting everyone involved in a conversation on to a chat mail compatible

7:08

client to unlock the full potential

7:10

It's about network effects really but by sticking to open standards and providing

7:15

these easy-to-use libraries

7:16

They're trying to make bridging that gap as simple as possible for developers.

7:20

Right the adoption challenge makes sense

7:22

Okay, so we've covered the tech which is genuinely impressive

7:25

What does this translate to for you the listener or maybe for developers looking to

7:29

build something new?

7:30

Like what can you actually do with chat mail right now? Yeah, the practical side

7:33

Well, the chat mail core library offers what's called a high-level JSON RPC API

7:38

Basically, that's a clean interface for app developers. It lets them easily add all

7:42

the chat mail features contact management setting up chats

7:45

Sending and receiving messages instantly via email or PDP without needing to be

7:50

rust experts

7:51

It abstracts away a lot of that low-level complexity and to make it even easier

7:56

They provide language bindings like adapters or bridges for loads of popular

8:01

languages

8:01

We're talking C JavaScript Python go free Pascal Java Swift. Wow, that's

8:07

comprehensive

8:07

Yeah, these developers can plug this core power into all sorts of apps web desktop

8:12

mobile

8:13

It really opens up the possibilities and it's not just theoretical right? You

8:16

mentioned projects are already using this

8:18

Can you give us a sense of what kind of friend tens are out there? Maybe an

8:20

interesting example?

8:22

Absolutely, the project website actually has a gallery. There are already native

8:25

clients for Android iOS and desktop

8:27

Aiming for that seamless experience plus integrations with existing chat platforms

8:32

like pigeon and telepathy, which is cool

8:34

Even for news platforms like a boat to touch as for an innovative example

8:38

Think about the bots being built. You could have say a secure alert system for a

8:43

community group

8:44

Instant notifications but end-to-end encrypted

8:47

So only the right people see sensitive info or maybe a bot facilitating secure

8:52

anonymous reporting for whistleblowers

8:54

Leveraging emails resilience, but with chat mails privacy. These things are

8:58

actually being developed

8:59

It shows the versatility you can even play with it directly using a command line

9:03

tool

9:04

They provide Delta chat rep all to set up accounts and send messages shows how

9:08

solid the foundation is

9:10

So fundamentally this seems to be about as you said raising the floor for everyone

9:14

who relies on email

9:15

Even if they don't realize it making that base level of communication much more

9:19

secure private and instant using tools that are accessible

9:22

It feels like a real effort to provide alternatives to the big centralized

9:27

messaging silers

9:28

We're all kind of locked into it's an ongoing thing. Absolutely ongoing

9:31

It's not just about building their own stuff

9:32

The team actively contributes back to the open source ecosystem

9:36

They find bugs in the hundreds of rust libraries they depend on and they submit

9:40

fixes upstream. Ah, that's good citizenship

9:42

It really is it strengthens the whole foundation for everyone. It reflect that core

9:46

belief in open robust

9:48

Transparent technology build for everyone's benefit. So wrapping things up. What

9:53

does this mean for you?

9:54

Chat mail isn't just trying to add some bells and whistles to email

9:58

It's fundamentally reimagining it turning it into a private instant messaging

10:02

backbone for potentially well everyone

10:04

It keeps the global reach of email, but turbo charges it with modern encryption and

10:09

efficiency

10:10

It's a really powerful example

10:12

I think of how open source innovation can take something foundational and make it

10:15

relevant

10:16

Private and user controlled for today's world

10:18

Escaping those proprietary walled gardens and that really leads to a final thought

10:23

for you to maybe ponder if

10:24

Digital communication could be truly instant truly secure and fully decentralized

10:28

built on open universal standards like email

10:32

What new possibilities would that unlock? How would that change how we connect

10:37

share information collaborate, you know

10:39

Free from the limits and the potential oversight of single giant platforms

10:44

What could that mean for society for communities or just for your own personal

10:47

conversations?

10:48

That's a fantastic question to leave us with a lot to think about there and that

10:53

wraps up our deep dive into chat mail

10:56

Thank you so much for joining us on this exploration and a final big

10:59

Thank you to our sponsor safe server for helping make this duck dive possible

11:03

Remember safe server provides hosting and digital transformation solutions. Check

11:07

We look forward to diving deep with you again very soon

11:07

We look forward to diving deep with you again very soon