Roadmap
What works today, what is being built next, and where this is going. Grouped by readiness rather than by date.
Everything below is grouped by how close it is to your hands, not by a calendar. We would rather ship something that holds than hit a date with something that does not.
Available now
| Capability | |
|---|---|
| Encrypted messaging Sealed in your browser, carried as ciphertext, opened only by the recipient. | Live |
| Names you own Minted to your wallet. No renewal, no rent, no operator who can reassign them. | Live |
| Gas-only mail Bodies ride in event logs. Names of five characters and up cost nothing beyond the transaction. | Live |
| Stamps Charge strangers to reach you. Answer them and it goes back; ignore them and it becomes yours. | Live |
| Contacts and blocking Time-bounded free passes, and a block that returns any stamp being held. | Live |
| Key rotation Retire a key without losing older mail. Versions are monotonic and never reset. | Live |
| Reserved names Brand and system names held back so they cannot be used to impersonate. | Live |
Coming next
Specified and under way. These are the ones we expect to land first.
Outside review of both contracts and the client key derivation. Three rounds of adversarial review have been done in house and found real issues. That is the argument for external eyes, not a substitute for them. The report will be published here in full, findings included.
Today a message proves it was not tampered with, and the chain records who paid for the transaction. A per-account signing key would make authorship provable on its own terms, independent of who sent it.
The same protocol on the cheaper chain, so routine messaging costs a fraction of a cent. One mailbox identity already spans both networks by design; what remains is how names resolve across them.
On the horizon
Intended, not yet specified. Listed so you know where this is going.
Private by default
Contents are already private; the social graph is not. Stealth addressing and sealed sender would close the largest remaining gap, so observers cannot see who is talking to whom.
Attachments
Large files held off chain, with only a reference and a content key inside the envelope. The on-chain size ceiling stays where it is.
Encrypted broadcast
Announcements to many recipients at once, without a plaintext mailing list sitting somewhere waiting to leak.
Tradeable names
Premium names as transferable assets, with a primary market rather than a race between whoever is watching the mempool.
Mobile
A dedicated client. The web app already works on a phone; this is about doing it properly.
Name interoperability
Resolving existing on-chain identities, so a name you already own can point at a mailbox.