81–90 of 129 posts
I wouldn't use it anyway. But I would sponsor Firefox like this. However with Firefox you can only sponsor the Mozilla foundation and not the product itself.
>[...] wholly owned by the Mozilla Foundation. Funds will be reserved for use in the Thunderbird project. [...] Why doesn't Firefox have this?
I understand about the corporate/foundation split, but they could just sell 'subscriptions' that don't really give anything so they're basically donations. If the pencil pushers really insist something is given in return, they can make a cool subscriber badge in the app or something.
Right now they're focusing too much on their VPN stuff which isn't available here and I have no need for anyway.
Earlier quoted context omitted.
Did you get this extension audited by your security team? It sounds insane to me that you’re bypassing IMAP restrictions, with a plug-in that monitors and parses the entire O365 website…
To be fair, it’s the security team’s idiotic position on IMAP that prompted the parent commenter to find a workaround. It’s like how having super draconian password reset and complexity requirements ends up being less secure because users will start writing their impossible-to-remember passwords on post-it notes.
There is nothing draconian about restricting IMAP - any app could exfiltrate confidential emails once granted access. It’s a very sane rule to disallow everything except webmail or first party apps.
Earlier quoted context omitted.
To be fair, it’s the security team’s idiotic position on IMAP that prompted the parent commenter to find a workaround. It’s like how having super draconian password reset and complexity requirements ends up being less secure because users will start writing their impossible-to-remember passwords on post-it notes.
The IMAP blocking is for different draconian reasons. Office365 does not support Modern Auth with IMAP, which is considered a security baseline now.
Earlier quoted context omitted.
I find davmail to be the best way to access exchange. It connects to exchange and sets up local proxies using pop, IMAP, SMTP, and calDav. Then I can use whichever client I like. Otherwise it's just bouncing between which client has had the exchange plugins updated most recently. As a bonus, it's distributed as a jar, so you can download and run for the latest support, even on an LTS of a Linux distro
How heavy is davmail on the system? I am always a little paranoid about java apps. Can you accept/reject meeting invites with it? The Tbsync extension that I am using does not have this feature.
[edit]
I noticed I'm running it with "java -Xmx512M" which probably explains the half-GB of ram usage. It's possible that if I increased that value it would perform better with large folders, but I keep my inbox fairly reasonable and I don't care if the other folders take a bit of time to sync.
If your company uses Office 365, these guys have a plugin that I think parses the HTML website to get your mail (and calendar!) into Thunderbird: https://www.beonex.com/owl/ Just this week I gave them 10 Euros for the addon because my company refuses to enable IMAP for Office 365. I'm not affiliated with them, but I've been using the Tbird addon for a few weeks and it works perfectly. The license is per-year, though…
Did you get this extension audited by your security team? It sounds insane to me that you’re bypassing IMAP restrictions, with a plug-in that monitors and parses the entire O365 website…
I dislike Mozilla's politics and don't use Firefox, but I have been using Thunderbird since at least 15 years. So yes, donated money for this project, hoping that they don't come up with some "revolutionary" UI ideas.
Earlier quoted context omitted.
The IMAP blocking is for different draconian reasons. Office365 does not support Modern Auth with IMAP, which is considered a security baseline now.
Office365 supports Kerberos with IMAP, which would be the proper thing to do anyways. Giving passwords to a browser or email application is wrong.
If you have IMAP on GMail you get two choices, you can admit you're sacrificing security, and they'll mint a random password just for that IMAP application, or you can use OAUTHBEARER. As I understand it if enabled IMAP for Office365 can do OAUTHBEARER.
The nice thing about OAUTH is that it's a natural integration for your multi-factor authentication, which as I understand it doesn't fit well into Kerberos. But to be sure Kerberos is much better than yet another human memorable secret password exchange.
Earlier quoted context omitted.
understandable shifting sands; but that's NO excuse for the sort of shoddy work they've done to address it. At best interpretation, there was not enough rudimentary QA done, because some of their changes (at least, in previous releases i worked with) outright broke the ability to compose messages. This was the result of finally hitting the "upgrade" button: black text on a black background. So I rolled back. This, in…
I understand your frustration — I've similarly been bitten by some changes to Firefox; however please do remember that Thunderbird is developed by a small team with limited funds and adding or even maintaining configurability is expensive. That isn't to say that you should give to thunderbird, since they are currently disappointing you, but it is a bit of a vicious cycle.
Well, not exactly, because while it was on low-effort maintenance mode, there was no such changes; it was just doing the same job in the same way since forever. Problems arose when a new team with a new mission, new funding, and worst of all, "new" ideas ("new" being the same fate other pieces of software underwent in the last decade: inserting more web tech, changing the look into something more modern, i.e. more web-like), became active.