By cucks, for cucks. cuck.stream is for a small trusted circle. The goal is simple: keep mailbox contents as opaque as practical to the server/storage side, keep keys in the user’s hands, and be honest where the magic stops.

what we try to do
- store mailbox objects as ciphertext, not casual plaintext rows/files.
- separate admin/account management from mailbox decryption.
- require real authentication layers instead of one flimsy password check.
- render HTML mail carefully (sanitized, sandboxed, remote content off by default).
- keep the project small enough to understand and improve.

what we don’t pretend
- unencrypted SMTP ingestion can expose plaintext before encryption.
- metadata, timing, size, and routing info still exist.
- compromised clients, stolen backups, or bad opsec can defeat good intentions.
- post-quantum labels are not a substitute for review, correct implementation, and boring operational discipline.
- this is a friends-and-family development project, not a courtroom-certified cryptographic fortress.