# Blog

> This blog explains how privymail.eu works: the technology, the decisions, what they cost and where their limits are.

This blog explains how privymail.eu works: the technology behind it, what a decision costs and what it does not solve. The posts go into detail, from the protocol down to a single header, and name the limits of a method along with it.

## Posts

- [What is in our logs, and what is not](https://privymail.eu/en/blog/what-we-log.md): What the server of this website records, which logs the mail service keeps, how long they stay and what never goes into them.
- [This website can be verified](https://privymail.eu/en/blog/verifiable-website.md): What the signed inventory of this website contains, how it is rebuilt every day, how to verify the signature and what it does not prove.
- [A password that never leaves your device](https://privymail.eu/en/blog/password-never-leaves.md): How the OPAQUE method checks your password without our server ever seeing it, what the server stores instead and where the protection ends.
- [Why we do not use SMS codes](https://privymail.eu/en/blog/no-sms.md): Which second factor privymail.eu uses instead of SMS codes, why it works without a phone number and what it does not protect.
- [A website without JavaScript and without third-party servers](https://privymail.eu/en/blog/no-javascript.md): What this website's security policy allows the browser to do, how the rule is enforced and what the website gives up in return.
- [MTA-STS and DANE: how mail servers require encryption](https://privymail.eu/en/blog/mta-sts-dane.md): Why encryption between mail servers is optional by default, how MTA-STS and DANE change that and what Domain Autopilot sets up for it.
- [European providers only: the rule and its reasons](https://privymail.eu/en/blog/european-suppliers-only.md): Which rule applies to the providers behind the privymail.eu mail service, which services it excludes, what it costs and where it ends.
- [A computational puzzle instead of a CAPTCHA service](https://privymail.eu/en/blog/captcha-without-tracking.md): How privymail.eu slows down automatically created accounts without giving visitor data to third parties, and what a puzzle cannot do.
- [App passwords: your mail app never gets your main password](https://privymail.eu/en/blog/app-passwords.md): Why every mail app gets a password of its own, how that password relates to your mailbox key and what it does not prevent.

---

- This page as HTML: https://privymail.eu/en/blog/
- Deutsche Fassung: https://privymail.eu/blog.md