Live data from Hacker News

Protonmail can delete the wrong email and nobody cares

github.com

161–170 of 254 posts

Re: Protonmail can delete the wrong email and nobody cares

#161
I had an email account suspended by Protonmail for using single-digit aliases for testing, took me a week to get it back, and that was only after signing up for LinkedIn premium to be able to message a non-robot.

It was terrifying enough that it has made me rethink how I manage all of my online accounts. Incidentally, I never had that issue with Gmail in 10+ years.

Not a Protonmail fan.

Re: Protonmail can delete the wrong email and nobody cares

#162
post #70

Earlier quoted context omitted.

If you’ve been using your mailbox (and deleting mail) for a while, have over 50K mails in it now, and see (what you think is) a UID of 51950 on the most recent email, the chances that it’s “U” are extremely low, meaning there’s a gap in understanding or in implementation.

Every time I see that, I’m floored by it. The fact that message IDs in IMAP change when you delete messages has got to be one of the worst design choices in any in-use protocol. I’m flabbergasted by it. The sooner everyone moves to jmap the better.

To forestall confusion: there are two different ID mechanisms in IMAP.

The first mechanism is message sequence IDs. If you have a mailbox with N messages in it, these messages are numbered 1-N (inclusive); a new message gets N+1; and deleting message, say, 3 causes 4-N to be renumbered to 3-(N-1). Note that the server can be the one to delete the message (say another connected client deletes it), but server-to-client notifications of message deletion can only happen at specified times in the protocol. The client might still have stale sequence numbers when it sends you the next command however, because IMAP is pipelined. And if you think this sounds like a recipe for lots of weird bugs, you are indeed correct in those thoughts.

So what everyone uses instead are UIDs, which are stable IDs for a message (kind of). UIDs are monotonically increasing (a message with UID 100 is newer than one with UID 95, but there's no guarantee that UID 97 exists), and are not impacted by message creation or deletion. One way to think of them are offsets in the underlying mbox file of where the message lives. If UIDs need to be renumbered (... yay mbox), the server changes the UIDVALIDITY which means that previous UIDs are no longer necessarily valid.

The message sequence numbers kind of make sense, if you imagine that IMAP clients are very, very thin clients that don't maintain any local information, and if you imagine that servers are not expected to support two clients connecting to the same mailbox at the same time. But modern email clients need to maintain their own local database of email metadata, which means that the IMAP protocol has become, in effect, a database synchronization protocol, even though it's not originally designed as such (later IMAP extensions added features that made some elements of synchronization much faster).

Re: Protonmail can delete the wrong email and nobody cares

#163
post #139

Some years ago, I evaluated Protonmail as a replacement for my personal gmail account. When came the steps "can I easily move from this service?", I realized you have to _pay_ to export all your emails from the service. They make it super easy for you to open an account and receive emails, and then makes you pay if you want to get a copy of your own data. I contacted the support to tell them it is likely illegal unde…

to be fair, any half-decent email client already has this functionality built in for free.

Re: Protonmail can delete the wrong email and nobody cares

#164

Okay, rather than just complaining, I suppose we should gather alternatives, right? mailbox.org hey fastmail tutanota mailfence disroot posteo barracuda (for businesses) vivaldi mail mailpile countermail hushmail I haven't used any of these, so if anyone has others or has experience with any of these, please share your experience.

Mailbox.org is a great service, good support for custom domains. Also can use Exchange protocol so push notifications for emails (on iPhones at least) are possible

Re: Protonmail can delete the wrong email and nobody cares

#165
post #92
post #73

Earlier quoted context omitted.

Current title is "Protonmail can delete the wrong email and nobody cares". It makes it seem as if using just protonmail could result in deleting a wrong email. This is not the case, you have to be using proton bridge. People who care about protonmail but don't care about proton bridge have to click the link to learn that.

You don’t have to use the bridge for this to happen. Read the issues.

I've read the entire issue and it's just about bridge users.

UIDs get desynced between IMAP client and bridge, as the bridge does not seem to use persistent UIDs for messages.

If you don't use the bridge you won't have issues with mismatched UIDs.

Re: Protonmail can delete the wrong email and nobody cares

#166
post #86

JMAP is a replacement for IMAP. Unlike IMAP it has immutable IDs[0] but not much support[1]. [0] https://jmap.io/#faq [1] https://jmap.io/software.html

I think it's sadly a bit of a chicken and egg problem, unless someone sets out to write support for servers (mostly dovecot I assume) and clients (web and desktop).

It would be worthwhile for many reasons not just the immutable IDs. I'd certainly donate to someone showing initiative working on this.

Re: Protonmail can delete the wrong email and nobody cares

#167
post #139

Some years ago, I evaluated Protonmail as a replacement for my personal gmail account. When came the steps "can I easily move from this service?", I realized you have to _pay_ to export all your emails from the service. They make it super easy for you to open an account and receive emails, and then makes you pay if you want to get a copy of your own data. I contacted the support to tell them it is likely illegal unde…

You have to pay to receive a service? Good heavens!

Re: Protonmail can delete the wrong email and nobody cares

#168
post #140

Earlier quoted context omitted.

Nowadays they do provide an app (Import-Export) to export all your mail , even for free tier accounts, so it's quite easy to move away. See: https://proton.me/support/export-emails-import-export-app

Hmm. When I was using Protonmail in free tier, the Import-Export feature was only for the paid tier. Seems strange that they only opened it for free tier now. This should be a feature available to any tier in the first place.

Good. If you want to pay with your personal data, use gmail. If you want to keep your personal data, then pay the people who run the service with actual money.

Re: Protonmail can delete the wrong email and nobody cares

#169
post #58

Could the title be update to contain the word bridge as the issue is in the Protonmail bridge application and not on Protonmail itself. The entire title is clickbaity, but adding the birdge moves it away from being misleading.

How is it a click bait? Don't forget bridge is a paid feature of Protonmail.

"Nobody cares" and "this is a complicated thing that we've spent a year+ building a replacement for" don't seem very congruent to me. That said, it's a rather awful issue for a service like this to have for that long.

Re: Protonmail can delete the wrong email and nobody cares

#170
post #160

Earlier quoted context omitted.

Which is close-source (or I didn't find it in their github repo).

The repository for Proton Mail Bridge (which is open source) claims to also host the source for the Import Export app. Here: https://github.com/ProtonMail/proton-bridge Briefly looking at the files and code it's hard to tell whether that is still the case, but it's fair to assume Import-Export would reuse most of the machinery behind Bridge.

bridge exposes imap making it easy to download all your data using Thunderbird or another client. I don't know about "export" because imap does what I want and is supported by most providers in the same format.
Post reply on HN