121–130 of 254 posts
The first clue might have been the UID for an in-use mailbox with over 50K messages being 51950.
I know right? I mean naive question, but why wouldn't they simply use actual UUIDs/GUIDs?
Earlier quoted context omitted.
Sounds reasonable. Any gotchas there? I already read that vanity TLDs are bad, obscure countries' TLDs are bad, and even .eu may be unstable. Which are good services that can sell me an .org or .de domain for a fair price?
I have heard people say "vanity TLDs are bad" but never experienced it myself. I have email addresses at .co.uk, .digital and .social never had deliverability issues with sending or receiving. When I worked at a large (100m emails/wk) email service provider the key thing was sending IP reputation followed by things like DKIM and SPF DNS records on the sending domain. IP reputation would be an issue if you self hosted…
We resolved it by pointing clients to use google dns.
Never had similar problems with .com
Earlier quoted context omitted.
> The server doesn’t need 24/7 five-nines or anything. It’s not for receiving mail. You don't need 24/7 server for receiving email. You can have it offline for a day or two a week and you'd only lose maybe some spam. I'd call that involuntary graylisting. :D
Many services use email-based login links or other second-factor codes. Email being offline means you can’t log in to or use these services.
Earlier quoted context omitted.
I will agree with you if the bridge in a open source project backed by communities. However, bridge is a paid feature used to attract more users. Also, I don't understand your point about e2ee. Bridge to proton server is also e2ee. The mail interface is just a implementation of e2ee in browser, isn't it?
No. Proton mail is a paid service. It comes with the bridge. The bridge is not extra. Free-tier Proton Mail may charge for the bridge. I don’t know, I don’t use free-tier Proton Mail.
I switched to Proton a few months ago, I quite like it. The outage a while back and this do worry me a little bit, but for me it's not enough to switch as I don't use the bridge, it has worked really well for me, and don't really like the alternatives for various reasons. I do think it's relatively early stage. Yes, the email product has been around, but the more business orientated suite of products seems very early…
why would you rely on a 5 digit number for unique identification rather than something like a g/uuid?
There are events where the UIDs change, for example when a server needs to rebuild its indices after corruption, but those should be extremely rare. Your server should also show this change when asked for UIDVALIDITY.
A message is defined by (UID, UIDVALIDITY, folder name). If this tuple changes, the message needs to be refetched. It's not the best mechanism for supporting multiple mail clients at once but it's easy to implement at least.
To clarify because comments (so far) seem to ignore what Proton Bridge does. Proton Mail is web mail, like Gmail. That part is fine. You use Proton Bridge as a connector to mail client software. The thing that’s perhaps unclear is, Proton Mail is end-to-end encrypted email. You use Proton Bridge to walk your secure email beyond that enclave into whatever YOU are running in your userland scenario. Part of all this is,…
> Which begs the question, why would you use Proton Mail if you’re gonna negate its unique value proposition? Because most users don't care about the end to end encryption. They just want to host their email somewhere [1]. And perhaps have it available offline. All this encryption on everything is mostly turning into security theatre. All mostly because identity theft is so easy in the US. Perhaps that's the problem…
Rarely have I seen such mastery of the art of understatement.
I hope they check out Migadu, which has been excellent for me — and would seem to be a much better fit for them, too.
Could the title be update to contain the word bridge as the issue is in the Protonmail bridge application and not on Protonmail itself. The entire title is clickbaity, but adding the birdge moves it away from being misleading.
The problem is they've been aware of this very serious bug for more than a year, and haven't tried informing their users. So "Protonmail" in this context refers to the business, and the issues surrounding their responsibility, competence and ethics.
If no user steps up then it might not be that important issue in the first place.
Earlier quoted context omitted.
What are those better options that HN likes? I just switched all my accounts to protonmail, but stories like this make me want to reconsider. The fact that they won't allow me to set up a forwarding rule in case I want to switch again doesn't help.
I uses FastMail after I discover this serious issue about Proton. I would say it work flawlessly and their web mail client is super fast; even faster than Gmail. Besides, FastMail exists before Gmail and the people in FastMail are active standard protocol developers like IMAP and recently JMAP (a modern mail protocol will replace SMTP/IMAP, FastMail as a reference implementation), which is good because at least I kno…
It’s really fast, but come on, that’s one low bar to jump over. Gmail is the electron of mail interfaces.