• We use SSL/TLS in Apache and Postfix
• We don't log anything that usually contains personal data
• Coming soon : We plan to store mails in encrypted form (instead of cleartext)
• Coming soon : We plan to create a Tor .onion service

AnonymousRecipient is built using Postfix, Apache/PHP and Docker, on a Debian host.

There are 3 main components : this website (hosted in Apache, written in PHP), the mail agent (Postfix) and some glue code (written in bash).

The website allows anyone to create a new random email address, with its associated mailbox, and to view its content. Postfix is set up to receive mail sent to *@*.AnonymousRecipient.com. And the glue code mainly serves to link email received by Postfix to mailbox created throught the website. It also manage mailbox expiration, email convertion to text and html, etc.

Each component is run in a separate docker container, to improve security, privacy and stability.

We leverage the virtual mailbox feature of Postfix to receive incoming mail sent to *@*.AnonymousRecipient.com. SSL/TLS encryption is enabled, but optional (in case the sending party doesn't support it). Logging is kept to a minimum by disabling all mail-related facilities in rsyslog, except for mail.warn and mail.err (which shouldn't contain any personal data).

Generally speaking, Apache and PHP are set up with security and privacy in mind.

We serve pages using HTTPS, and as usual, logging is kept to a minimum (all *Log directive are disabled, except for ErrorLog).

On the client side, we don't use any external dependency : no Google Analytics (!), no remote resources from a CDN, etc.

We plan to release everything on GitHub !

But first we want to clean up the code, add some comments, etc. so please by patient as it will take some time.

If you are interested, please drop us a message below.