Live data from Hacker News

The ProtonMail Android app is now open source

protonmail.com

31–40 of 84 posts

Re: The ProtonMail Android app is now open source

#31
post #24
post #23

Earlier quoted context omitted.

Exactly what a CIA shill would say. We'll find out in 50 years.

Don't worry - I'm actually a dog in front of a keyboard :o)

Oh dear, you won't quite make it to the end of the bet then... =/

Re: The ProtonMail Android app is now open source

#33
post #7

Cool. But neither the audit nor the repository explains if it's possible to create the APK in a reproducible way. Google Play distributed APKs contain their signatures, so in theory it wouldn't be possible to 1:1 reproduce the distributed ones. However for F-droid this would allow them to sign their own APKs and provide some additional security guarantees in their supply chain. Also a bit concerning that there is no…

You could try stripping the Google Play signatures... and just doing a hash check against an existing version you build yourself.

Re: The ProtonMail Android app is now open source

#34

> Their audit found that our app has no outstanding vulnerabilities. Either I'm misunderstanding what they mean by "outstanding" or this is a very bold claim. Shouldn't they be saying something like "Their audit found no vulnerabilities in our app."

I think it means that they resolved any found vulnerabilities before the audit was published. Therefore none of the found vulnerabilities were _outstanding_ when they published it. In this case _outstanding_ means that the auditors have not yet verified a fix.

Re: The ProtonMail Android app is now open source

#35

I'm happy to see ProtonMail getting exposure. I moved over from gmail about a year ago, and have been quite pleased with their service. Only downside I've seen is that there isn't a clear way to increase available data storage, independent of other billable line items (like number of users etc). Other items on my wish list would be more customizable email filtering, I'd love to be able to create filters such as 'is t…

I use both protonmail and gmail, with protonmail used for things that I feel require more privacy, such as banking. One thing that I really do miss, and I understand the reasoning, is being able to effectively search for an email. Since the content is encrypted you can only search for what is in the headers.

Re: The ProtonMail Android app is now open source

#38

Is there a way to centralize all my emails in protonmail? Can't see an option to enter my pop3/smtp server. Or I'm blind?

ProtonMail doesn't really try to be general-purpose email client. You can either use the bridge with an email client of your choice, or you can forward your mail.

Not really the email client of your choice. In Mac OS, you can do Apple Mail and Thunderbird well, but if you try something like Airmail, it crashes the app (or other unexpected behavior). Not exactly 100% IMAP compliant for what I can tell.

Re: The ProtonMail Android app is now open source

#39

Earlier quoted context omitted.

Why would they? AFAIK they don't support IMAP/SMTP either, not without that client-side "bridge" anyway.

JMAP support by the ProtonMail Bridge would be nice though.

If you just want a simple way to access your mail over HTTP (without the need for standards) you could probably also run imap-api[1] pointed at the Bridge. Although admittedly it does feel a bit hacky.

Or maybe also getmail or fetchmail which will download your mail over IMAP and put it in the maildir format as files.

[1] https://github.com/andris9/imapapi

Post reply on HN