2 ms·
> Obviously that's not possible when receiving mail via SMTP and providing access via IMAP. Afaik on desktop all those involve the use of the ProtonMail Bridge
by freeflight 8y ago
> Obviously that's not possible when receiving mail via SMTP and providing access via IMAP.
Afaik on desktop all those involve the use of the ProtonMail Bridge application [0]? At least that was my understanding when I couldn't get my Thunderbird setup to check ProtonMail accounts, it requires the Bridge application.
The paper is weird in that context because the Bridge application is mentioned only once in the whole paper, as a side note: "For simplicity, we group it with smartphone applications."
But from what I understand their whole Outlook client setup wouldn't even work without it, so desktop clients are just as secure as the smartphone applications when they use the Bridge?
[0] https://protonmail.com/support/knowledge-base/imap-smtp-and-pop3-setup/ https://protonmail.com/support/knowledge-base/imap-smtp-and-...
- lorenzhs 8y agoOh, looks like you're right on IMAP. But they still receive mail via SMTP from other servers, there's no way around it if you want to be able to receive email from people not using your service. You need to be confident that their receiving servers encrypt your email without storing an unencrypted copy elsewhere.