Software behind this website
| Component | Purpose | License |
|---|---|---|
| Zola | builds the static website | MIT |
| Caddy | HTTPS and serving the website | Apache 2.0 |
| EB Garamond | self-hosted font | SIL Open Font License |
| Geist | self-hosted font | SIL Open Font License |
| Manrope | self-hosted wordmark font | SIL Open Font License |
Fonts, images and styles are served from our own server. The website contains no JavaScript and loads no embedded third-party resources.
Inventories and their limits
The transparency page provides the website SBOM and a separate package inventory for the Debian host. The website inventory records the published components and artifacts; the host inventory records installed operating-system packages at its observation time.
These inventories do not reconstruct every embedded library, build tool or original software dependency. A package list also does not show that every known vulnerability has been fixed. Host findings require a separate assessment against the relevant Debian and vendor information.
Software behind the mail service
The mail service builds on open-source software. The inventories above do not cover it: they describe only the website and its host.
| Software | Purpose |
|---|---|
| Postfix | SMTP mail transport |
| Dovecot | IMAP/POP3 mailboxes and encryption |
| Rspamd | spam filtering |
| PostgreSQL | account database |
Our own code
Our principle: what runs on your devices or handles your keys, we publish under free licenses. That covers webmail, encryption and key processing. The principle also applies to Domain Autopilot checks, the manifest generator and our changes to the open-source software we use.
We do not disclose the rules for spam and fraud detection in detail, because that would make them easier to evade.