liber Mail

liber is a private email client (https://liber.sh). It's just good email.

• Read, search, compose, folders, threads, contacts - all from vscode.
• Works with any IMAP/POP3 account!
• Also ships as desktop and mobile apps: https://github.com/nickheyer/liber-releases/issues
• Liber even runs entirely in your web browser: https://mail.liber.sh

Why this exists

liber's engine is Rust compiled to WebAssembly: IMAP, SMTP, parsing, search, and TLS itself all run client-side. Web browsers (and the closely adjacent WASM runtimes) are very secure, they have to be. Liber is by design, inheriting that security.

The only native capability it needs from a host is a dumb byte relay - something that moves ciphertext between a WebSocket and a TCP socket (browsers dont speak raw tcp / non-http tcp). For web, this is hosted by cloudflare turnstile workers. For everything else, it's embedded into the app / self-hosted.

Want to test my client-side claims? Use something like wire-shark (https://www.wireshark.org/) to monitor traffic in and out of liber.

Downsides To Strict Adherance

Well for one, we had to write most of the protocols from scratch, in Rust w/ a WASM target. That's added complexity that makes any type of optimization or feature take a lot longer in dev than it normally would.

Also, while it's trivial to drop a web app into a desktop/mobile platform, the beurocracy to get something actually published on mobile or desktop app stores is completely insane and expensive. That being said, this kind of frustration was the original inspiration for this project - so thanks apple + google?

Report bugs at https://github.com/nickheyer/liber-releases/issues