N2Usenet Gateway v2.7.4 Nym
1. Load Identity or Start Fresh
🔑 Have a saved identity? Load it to auto-fill all fields.
Or fill the fields below to create a new identity.
About N2Usenet: A privacy-focused standalone gateway that posts to Usenet newsgroups over Nym to the TCPReset Mail2News and NNTP infrastructure. No access logs are kept. To post you must first create, or load, a VFACE pseudonymous identity: username, email address, and Ed25519 keypair. The complete tuple deterministically generates the identicon and is published in the post.
What is Proof-of-Work? This step generates a hashcash token that prevents spam by requiring your computer to perform some calculations.
2. Sign Your Message
What is this? Your keypair is generated and your message is signed locally in your browser with the self-hosted TweetNaCl (nacl) library, and your Ed25519 secret key never leaves your device. Only the public identity (username, email, public key) is sent, to render the identicon. The signature proves you authored this post.
VFACE / Face Header: Your identicon is produced by the original identicons-cli engine, the same backend as identicons.virebent.art. It is deterministic from username|email|public-key, so all three fields must remain unchanged to preserve the same VFACE identity. It is embedded as a folded Face: header (RFC 4021/2822) alongside X-Ed25519-Pub and X-Ed25519-Sig.
Saving is optional: skip it for a fresh throwaway identity each time, or save the file to restore the same username, email, keypair, and identicon later. These fields are locked together while the identity is active. Keep the file private, whoever holds it can sign as you.
Send Message
What is this? This final step sends your signed message through Nym-wrapped SMTP/TLS, the Virebent mail gateway, TCPReset Mail2News, and finally Tor to the TCPReset onion NNTP endpoint.
🔐 HTTPS, Nym, TLS and Onion NNTP Posting Path
Your browser submits the signed payload to N2Usenet over HTTPS. From the N2Usenet gateway onward, the route is Nym-wrapped SMTP/TLS, the authenticated Virebent MTA, TCPReset Mail2News, then Tor to the onion NNTP endpoint:
Nym carries the SMTP connection to mail.virebent.art:587. Inside that Nym path, STARTTLS provides server-authenticated TLS and SMTP AUTH identifies N2Usenet to the MTA.
Show addresses used
- HTTPS: https://n2usenet.virebent.art
- SMTP/TLS target: mail.virebent.art:587
- AUTH and MAIL FROM: n2usenet@virebent.art
- Sender: n2usenet@virebent.art
- Public From: username and email from your active identity
- RCPT TO: mail2news@mail2news.tcpreset.net
Postfix accepts the authenticated submission, keeps the fixed SMTP envelope and transport Sender, adds the Virebent DKIM signature, and relays the message to TCPReset Mail2News. The public From remains the active profile identity.
Mail2News validates and converts the signed email into a Usenet article, strips configured transport metadata, and regenerates the Message-ID for the NNTP post.
Mail2News connects through Tor and issues NNTP POST to the onion endpoint. The TCPReset INN service publishes the article under news.tcpreset.net.
🔒 Privacy boundaries: HTTPS protects the browser-to-N2Usenet hop, but the N2Usenet server still receives the browser connection. Nym carries the N2Usenet-to-MTA session, while SMTP TLS protects that session end to end inside Nym. Mail2News then uses Tor for the final onion NNTP hop. Once accepted by INN, the Usenet article is public.