Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The ProtonMail Android app is now open source

protonmail.com

Post reply on HN
Print view View original

71–80 of 84 posts

Re: The ProtonMail Android app is now open source

#71

Post by novok »

frodprefect wrote: post #41
dyingkneepad wrote: post #27

Earlier quoted context omitted.

Oh, bad timing. Just a few months ago I was on the fence about Protonmail vs Fastmail (vs all others) and ended jumping to Fastmail: the privacy pro didn't seem to outweigh the cons. Now with open sourcing stuff the pros do get somewhat better... But reevaluating and switching would be troublesome.... Maybe in a few years I'll revisit it :)

The pricing is very different. Fastmail allows unlimited domains where proton is almost double the cost for two.

Yeah protonmail charging for the marginally free stuff, like domains and aliases is very disappointing. I make a new email for every account, in the form of catchall_alias@username.domain.com do I have to pay proton mail $24/month for that privilege?

Also not providing 20GB space as a default paid option in this day in age of $5/month/TB is also very disappointing.

Re: The ProtonMail Android app is now open source

#72

Post by Foxboron »

WrtCdEvrydy wrote: post #33
Foxboron wrote: post #7

Cool. But neither the audit nor the repository explains if it's possible to create the APK in a reproducible way. Google Play distributed APKs contain their signatures, so in theory it wouldn't be possible to 1:1 reproduce the distributed ones. However for F-droid this would allow them to sign their own APKs and provide some additional security guarantees in their supply chain. Also a bit concerning that there is no…

You could try stripping the Google Play signatures... and just doing a hash check against an existing version you build yourself.

You would need to repack the .APK, which would be a hurdle in the comparison.

Re: The ProtonMail Android app is now open source

#73

Post by Foxboron »

gruez wrote: post #47
Foxboron wrote: post #7

Cool. But neither the audit nor the repository explains if it's possible to create the APK in a reproducible way. Google Play distributed APKs contain their signatures, so in theory it wouldn't be possible to 1:1 reproduce the distributed ones. However for F-droid this would allow them to sign their own APKs and provide some additional security guarantees in their supply chain. Also a bit concerning that there is no…

>Google Play distributed APKs contain their signatures https://support.google.com/googleplay/android-developer/answ... >Note: Using app signing by Google Play is optional. You can still upload an APK and manage your own keys instead of using an app bundle

That is not really the point. The signatures are embedded in the APK. Repacking it to remove, or add valid signatures, would be a problem.

Re: The ProtonMail Android app is now open source

#74

Post by aaronscott »

deif wrote: post #26
aaronscott wrote: post #15

I'm happy to see ProtonMail getting exposure. I moved over from gmail about a year ago, and have been quite pleased with their service. Only downside I've seen is that there isn't a clear way to increase available data storage, independent of other billable line items (like number of users etc). Other items on my wish list would be more customizable email filtering, I'd love to be able to create filters such as 'is t…

Both those things you mention as wanting exist already. For data storage independent billing, go to Settings -> Dashboard. On Professional tier and above the data storage is a dropdown where you can increase the amount required. For email filtering go to Settings -> Filters and create as many conditions as you want on a filter.

Interesting, I pay for the professional tier, and do not see a separate dropdown available for storage. The professional plan lists 5gb/user (at a rate of about $5/month), and the only way to scale up storage on my dashboard page is to provision more users (up to 100, so max of 500gb).

It’s a non-issue now, but yeah I’d prefer to interact with my plan the way that you describe and be able to scale storage independently (and ideally at a cheaper rate).

Regarding filters, that’s great! I didn’t see that before and will likely utilize it heavily now that I know it exists.

Re: The ProtonMail Android app is now open source

#76

Post by fullstop »

underthensun wrote: post #66
fullstop wrote: post #35

Earlier quoted context omitted.

I use both protonmail and gmail, with protonmail used for things that I feel require more privacy, such as banking. One thing that I really do miss, and I understand the reasoning, is being able to effectively search for an email. Since the content is encrypted you can only search for what is in the headers.

Can not you use MS Outlook as email reader then search using it?

In Linux?

Re: The ProtonMail Android app is now open source

#77

Post by jraph »

Foxboron wrote: post #72
WrtCdEvrydy wrote: post #33

Earlier quoted context omitted.

You could try stripping the Google Play signatures... and just doing a hash check against an existing version you build yourself.

You would need to repack the .APK, which would be a hurdle in the comparison.

Maybe you could compare the list of files and files in the APKs instead of comparing the APKs themselves?

Re: The ProtonMail Android app is now open source

#78

Post by deif »

aaronscott wrote: post #74
deif wrote: post #26

Earlier quoted context omitted.

Both those things you mention as wanting exist already. For data storage independent billing, go to Settings -> Dashboard. On Professional tier and above the data storage is a dropdown where you can increase the amount required. For email filtering go to Settings -> Filters and create as many conditions as you want on a filter.

Interesting, I pay for the professional tier, and do not see a separate dropdown available for storage. The professional plan lists 5gb/user (at a rate of about $5/month), and the only way to scale up storage on my dashboard page is to provision more users (up to 100, so max of 500gb). It’s a non-issue now, but yeah I’d prefer to interact with my plan the way that you describe and be able to scale storage independent…

Ah I see, yeah the Plus plan lets you choose the storage. Professional works differently for some reason. I bet if you contacted their support they'd consider changing it though as it doesn't quite make sense as-is.

Re: The ProtonMail Android app is now open source

#79

Post by AnonC »

I hope the open sourcing helps accelerate the pace of development.

Tangentially, my needs are very minimal and I have a couple of ProtonMail accounts on the free tier that don't get much mail (the size of the mailboxes put together would be 5MB or so). I also aggressively delete unnecessary emails quickly and empty the trash. I'm waiting for multiple account support in the official mobile client for users on the free tier (this was promised quite sometime ago).

Re: The ProtonMail Android app is now open source

#80

Post by pixxel »

bflesch wrote: post #50
pixxel wrote: post #45

Earlier quoted context omitted.

I missed this. What’s the fiasco?

"Crypto AG was a Swiss company specialising in communications and information security. It was secretly jointly owned by the American Central Intelligence Agency (CIA) and West German Federal Intelligence Service (BND) from 1970 until about 1993, with the CIA continuing as sole owner until about 2018.[1] With headquarters in Steinhausen, the company was a long-established manufacturer of encryption machines and a wid…

I see. Thanks for the info. PM is competitively priced for the VPN/Email market, so I can’t quite make the leap you mentioned. If your concerns are based on price it would mean the whole market is corrupt. Maybe it is, heh, I’m open to that.

I use PM because fuck Google(Gmail), and fuck my ISP for profiting off my private data. I’ve always figured the 3 letter agencies can get access when they want. I’m not doing anything nefarious so I’m happy just to battle against corporate greed.

Stay suspicious though!

Post reply on HN