281–289 of 289 posts
Earlier quoted context omitted.
this. I will pay $50 for such an App for Fastmail (or really, just IMAP speaking please)
Have you tried Spark? It's the spiritual successor to Sparrow, I use it on phone and laptop and really like it. The only downside is that it's on a freemium model... [1] https://sparkmailapp.com/
This looks really nice and runs great. Does the GMail API let you tap in to the "Important" tag?
Yes, it does! Flagging messages as important/unimportant is already supported in the code, but the feature is currently disabled in the UI. I plan to enable it once I add sections support to the Inbox to match up to Gmail's Priority Inbox feature.
PS - Thanks for the app, it's already an improvement in some ways over the gmail interface... looking forward to even more!
Earlier quoted context omitted.
"Serves only Google" when talking about email is not as limiting as your language suggests. As of October 2018, Gmail had 1.5 billion users.
I think you're missing the point I was trying to make. When Gmail decides to ship their own native client on MacOS, this platform will become abandonware.
Earlier quoted context omitted.
I don't see much difference in the distinction between the client software (written by Mimestream, probably with regular updates) having access to your account, which it obviously has to has, and Mimestream having direct access. But IANA security researcher, so salt liberally.
I mostly agree -- it takes a level of trust to provide your credentials to a third party app. However, there are precautions that you can do to minimize the risk of your credentials used without your authorization with a local client software: 1) requiring multi-factor authentication when credentials are used from a new location/device/ip... 2) A local firewall(like little snitch for osx) that surfaces any unexpected…
One tip - on the Google OAuth sign-in page, you can inspect the URL's query component to see the redirectURL parameter, and you'll see where Google will send the token. In Mimestream's case, it is :/oauthredirect, which is a custom scheme registered with macOS by the app, so macOS shows you the "Do you want to allow this page to open Mimestream" prompt.
This being said, you are totally correct, when you use any closed-source app like this that you did not build yourself, you are placing trust in the developer, and you are wise to be cautious.
In my opinion, there are still several practical security/privacy downsides to apps that run intermediary services with access to (or copies of) your email: - A larger attack surface (the intermediary service) for an adversary to take advantage of, and one that is probably less hardened than Gmail - A larger bug surface, as the service could potentially accidentally expose your data to another user (and this sort of bug _has_ happened in the past to others). - Google probably has serious policies/systems in place for preventing a curious (or disgruntled) employee from reading your unencrypted email. Hopefully. That level of sophistication seems less guaranteed from a small company, and it's completely invisible to you as a user.
Hi HN! In the past, I spent over 7 years working on Apple Mail, and today I am really excited to share a new email client I'm building: Mimestream, a native macOS email client for Gmail. Mimestream is written in Swift, and uses AppKit+SwiftUI for a clean, stock appearance. It's designed to be fast, lightweight, and use a minimal amount of disk space. Mimestream's advantages over using the Gmail web interface includes…
Are you planning to support the "postpone" feature? This is the one thing that is missing for me when using gmail in Apple Mail.
Hi HN! In the past, I spent over 7 years working on Apple Mail, and today I am really excited to share a new email client I'm building: Mimestream, a native macOS email client for Gmail. Mimestream is written in Swift, and uses AppKit+SwiftUI for a clean, stock appearance. It's designed to be fast, lightweight, and use a minimal amount of disk space. Mimestream's advantages over using the Gmail web interface includes…
This is great! Will you be supporting the different type of inboxes e.g. "Important first"?
Earlier quoted context omitted.
> To prevent unauthorized access, Advanced Protection only allows Google apps and verified third-party apps to access your Google Account data, and only with your permission. - https://landing.google.com/advancedprotection/ I didn't realise until now that third-party apps could work with Advanced Protection.
I didn't either. I'll be looking into this. Thanks!
Earlier quoted context omitted.
I didn't either. I'll be looking into this. Thanks!
I looked into it and it seems by invite only. I get it.