Workspace Encryption
.postsnail files and browser-local Shell caches use AES-256-GCM with a key derived from the Shell passphrase using PBKDF2-SHA-256, random salt, and random IV. Use a strong passphrase and keep the file private.
Public Proof
The public Website ZIP uses SHA3-512 digests and ML-DSA-65 signatures so verifiers can check published content against the creator public key. Proof does not prove legal identity or factual truth.
Limits
PostSnail cannot recover lost passphrases, cannot protect a compromised browser/device, and does not make the JavaScript runtime FIPS-validated.
Image Metadata
Images are copied as selected. Strip EXIF/GPS metadata before importing images if that matters for your threat model.
No Required Backend
The admin does not need accounts, upload services, or registry calls. The public PostSnail site may include lightweight analytics, but Forest registration is still a separate public-site action after publishing.