Haven relay

Private draft ciphertext queue. It can hold sealed messages for two enrolled machines. It cannot read them. This page is not connected to a live personal or work bot.

Accept path

RELAY_ENABLED is not true. The process is up and the queue refuses mail.

Transport encryption

HTTPS, when a later host serves this over TLS. The local draft speaks HTTP on localhost only. TLS ends at the relay, so it is not end-to-end encryption.

Encryption at rest

The queue stores sealed ciphertext, not plaintext. That is not disk encryption, and a host admin can still copy or delete the ciphertext.

End-to-end encryption

Each sender seals with libsodium crypto_box_seal to the recipient box key pinned out of band, then signs with Ed25519. Private keys are not on this relay. Plaintext is still visible to the recipient bot, its model provider, and anyone who administers that machine.