revamp

index.md

@@ -1,14 +1,12 @@
-# Smol Mail
+# smolmail
 
-An online correspondence protocol reduced to its essentials: an address, a key and a message, with privacy built in from the ground up.
+A minimalist, cypherpunk mail protocol. Fun, simple, decentralised, end-to-end encrypted.
 
-Email should be simple again. Inspired by [Spartan](spartan://spartan.mozz.us/), [Misfin](gemini://misfin.org/), and [LXMF](https://github.com/markqvist/lxmf).
+Online correspondence reduced to an address, a key and a message.
 
-- A five command protocol that just works
-- One 32-byte master key is the only identity: your key is your account.
-- A fresh key seals every message, nobody can trace who talks to whom.
-- Anti-spam without censorship
-- No certificates, no CAs, no expiry.
+Five operations, four primitives, zero extensibility mechanisms. One 32-byte master key as the only identity. No certificates, no CAs, no expiry: one round trip and the server's key pin are the entire trust model. A fresh key seals every message: untraceable, unforgeable, and safe by construction.
+
+Anti-spam without censorship: quotas and tokens do the filtering, and servers never see a word. Clients talk directly to the recipient's server. Registration is bound to one server by proof-of-possession. Double-signed certificate chains move a username to a new key, and old keys keep receiving until every contact catches up.
 
 ## Send your first message
 
@@ -22,7 +20,7 @@ Not sure what any of this means? No problem! Just visit our [Webmail Client](htt
 
 ## Identity
 
-Identity is one Ed25519 keypair. The 32-byte public key *is* the identity; the 32-byte seed is the only secret to back up. Encryption keys are derived from the same keypair, so there is exactly one thing to hold, move between servers, print on paper or scan from a screen.
+The only secret is a 32-byte master. Back that up and nothing else: the Ed25519 signing key, the encryption key derived from it, and the key that issues accept tokens all come out of it. One thing to hold, move between servers, print on paper or scan from a screen.
 
 Signatures prove authorship. A throwaway key per message means a stolen identity key cannot decrypt anything already sent.
 
@@ -44,3 +42,4 @@ Ed25519 · X25519 · ChaCha20-Poly1305 · SHA-256. Four established primitives,
 ## Specification
 
 [SPEC.md](SPEC.md): wire format, operations, trust model and conformance.
+[WS.md](WS.md): smolmail over WebSocket annex.