July 27, 2026

Inbox Wars: Return of the Nerds

Modern email can be built from borrowed parts

Techies want to rebuild email from scratch, and the comments are already fighting

TLDR: A new proposal wants to rebuild email using web-style tools while keeping normal-looking addresses. Commenters loved ideas like stranger message requests and paid anti-spam, but fought over whether lost accounts should be recoverable and whether anything can beat email’s giant built-in audience.

A developer just proposed a full-on email makeover: keep the familiar user@domain address, throw out the 40-year-old plumbing underneath, and rebuild the whole thing using ordinary web tech. In plain English, the pitch is: what if email worked more like modern apps and less like a haunted house built in the 1980s? Messages would travel over the same basic system websites use, with built-in ways to verify who sent them, lock them with encryption, and even make first-time senders ask permission before barging into your inbox.

But the real fireworks were in the comments, where readers instantly split into camps. One side was weirdly thrilled by the idea of a “requests” folder for strangers, basically saying: finally, a way for random people to knock without dumping junk all over the carpet. Another crowd loved the anti-spam chaos of charging unknown senders a fee, with one commenter floating the social equivalent of a digital bouncer: introductions only, please. Then came the sovereignty drama: should your website name be allowed to restore your identity if you lose your secret login key? One reader flat-out rebelled, arguing domains are rented, not owned, and if you lose the key, sorry, start over.

And then there were the realists, raining on the reinvention parade: email is everywhere, and replacing something everybody already has is brutally hard unless it can still talk to old-school email. Bonus deadpan award goes to the commenter who simply shrugged, “still better than CoI,” proving that no matter how futuristic the proposal gets, the internet will always find time for a drive-by dunk.

Key Points

  • The article proposes HMTP, an HTTP-based mail system that keeps the user@domain address format but replaces SMTP-era mechanisms with existing web technologies.
  • Its bill of materials includes HTTP, TLS, WebFinger, ActivityPub, Webmention-style verification, Ed25519, HPKE, sigchains, JMAP, SSE/WebPush, and content-addressed attachments.
  • The article argues HTTP already provides useful mail-protocol features such as transport security support, standard status codes, and compatibility with existing web infrastructure like proxies and Nginx.
  • For discovery and delegation, it proposes a static JSON document exposing inbox, keys, and devices, with WebFinger used to support mailbox delegation without MX records.
  • For identity continuity, it proposes signed key-rotation chains as the primary mechanism and a domain-controlled recovery fallback with a warning period when cryptographic continuity is broken.

Hottest takes

"if you lose your private key, you need to start again" — syhol
"the cost of cold spamming stops being zero" — wuschel
"still better than CoI" — endre
Made with <3 by @siedrix and @shesho from CDMX. Powered by Forge&Hive.