9 ms·

Hi HN! In the past, I spent over 7 years working on Apple Mail, and today I am really excited to share a new email client I'm building: Mimestream, a native mac

Hi HN! In the past, I spent over 7 years working on Apple Mail, and today I am really excited to share a new email client I'm building: Mimestream, a native macOS email client for Gmail. Mimestream is written in Swift, and uses AppKit+SwiftUI for a clean, stock appearance. It's designed to be fast, lightweight, and use a minimal amount of disk space. Mimestream's advantages over using the Gmail web interface includes features like multiple accounts, a unified inbox, system notifications, swipe actions, dark mode, (some) offline support, tracker prevention, multiple keyboard shortcut sets, and more. Mimestream differs from other email clients because it uses the Gmail API rather than IMAP, so it supports more Gmail-specific features like categorized inboxes, Gmail's search operators, first-class labels support (apply multiple via ⌘L, set colors, etc), synced aliases, synced signatures, etc. I'm planning a lot more work in this area, including server-side filter configuration, Google Drive support, G Suite directory autocomplete, and more. The app is a traditional email client that makes direct connections to Gmail and stores your data on your Mac. There are no intermediary servers with access to your account or copies of your messages. Mimestream is free for a limited time during the public beta, but will eventually be a paid app by the time it gets to the Mac App Store. I hope you enjoy trying out the beta, and I look forward to hearing your feedback!

robenkleene 6y ago
This is a great point: "There are no intermediary servers with access to your account or copies of your messages." A number of popular email clients use intermediary servers and that's a complete deal breaker for me. I'd argue that should be a deal breaker for almost anyone. I'm not a security expert, but as far as I can tell, for most people the single biggest security vulnerability is an attacker gaining access to their email. Using a mail client with an intermediary mail server essentially doubles the surface area attackers can exploit.
- deleted 6y ago
  [deleted]
- dvtrn 6y ago
  I never quite understood what the value add was for email-client developers to use intermediary servers. Is it to gather usage telemetry or something else?
  - mappu 6y ago
    Pessimistically for telemetry, but I suspect some of them are Javascript apps in a lightweight shell that have actual technical difficulties making a TCP IMAP connection.
    - njhaveri 6y ago
      Yeah, I think difficulty making an IMAP connection is one reason. I think the biggest reason has been to decorate more features on top of the backing email service, like adding Snooze support to an arbitrary IMAP account (so the server can un-snooze a message at the scheduled time). That being said, there are security/privacy implications to that model, and I wouldn't personally use an app that works this way. That's why Mimestream was built as a traditional client.
    - scintill76 6y ago
      Doing TCP from a "native" JS app should be pretty easy[1] (caveat: I haven't tried.) I'd think the cost of running a proxy server would be enough motivation to figure this out, for any developer whose primary reason is as simple as technical difficulties with JS and TCP. I think it more likely the other responses such as doing heavy indexing that won't work as nicely on the clients. [1] https://stackoverflow.com/questions/41674063/is-it-possible-to-create-a-tcp-client-with-electron https://stackoverflow.com/questions/41674063/is-it-possible-...
  - monadic2 6y ago
    Indexing and search can be sophisticated & available before downloading any messages; you can ensure completion of complex pop and imap operation (eg working with messages "tagged" by gmail); just a few benefits. Note, this is in no way an endorsement of middle manning email management and facading as a client.
  - 6y ago
- vladgur 6y ago
  I was about to install it until i went through OAuth setup which grants the "Mimestream" application permissions do to a number of things including "Read, compose, send, and permanently delete all your email from Gmail" One can blame it on Google OAuth UI or on Mimestream UI, but its not clear to me whether these privileges are granted to the locally installed application and can only be used by it OR whether these privileges are Granted to "Mimestream" the Google OAuth App account which can then be used to do those actions outlined above by some service associated with "Mimestream" Google App. Needless to say, i chickened out from using my main google account with it and instead will test drive it with a toy account
  - aptwebapps 6y ago
    I don't see much difference in the distinction between the client software (written by Mimestream, probably with regular updates) having access to your account, which it obviously has to has, and Mimestream having direct access. But IANA security researcher, so salt liberally.
    - vladgur 6y ago
      I mostly agree -- it takes a level of trust to provide your credentials to a third party app. However, there are precautions that you can do to minimize the risk of your credentials used without your authorization with a local client software: 1) requiring multi-factor authentication when credentials are used from a new location/device/ip... 2) A local firewall(like little snitch for osx) that surfaces any unexpected outbound requests. These obviously wont be much help if you grant some other server permission to access your email.
      - njhaveri 6y ago
        Tokens are granted to the app running on your Mac, not a service. There's definitely no Mimestream-run service component with access tokens to your account. One tip - on the Google OAuth sign-in page, you can inspect the URL's query component to see the redirectURL parameter, and you'll see where Google will send the token. In Mimestream's case, it is <long-custom-scheme>:/oauthredirect, which is a custom scheme registered with macOS by the app, so macOS shows you the "Do you want to allow this page to open Mimestream" prompt. This being said, you are totally correct, when you use any closed-source app like this that you did not build yourself, you are placing trust in the developer, and you are wise to be cautious. In my opinion, there are still several practical security/privacy downsides to apps that run intermediary services with access to (or copies of) your email: - A larger attack surface (the intermediary service) for an adversary to take advantage of, and one that is probably less hardened than Gmail - A larger bug surface, as the service could potentially accidentally expose your data to another user (and this sort of bug _has_ happened in the past to others). - Google probably has serious policies/systems in place for preventing a curious (or disgruntled) employee from reading your unencrypted email. Hopefully. That level of sophistication seems less guaranteed from a small company, and it's completely invisible to you as a user.
m_b 6y ago
Hi, i browsed through the website but didn’t find a comprehensive comparison with Apple Mail. Why not just using the default macOS email client?
- Gaelan 6y ago
  It sounds like the biggest difference is that it uses Gmail's API instead of MIME, so it has better support for Gmail features like labels.
- njhaveri 6y ago
  There are two main differences: 1. Mimestream uses the Gmail API (instead of IMAP), so it supports more Gmail features: Gmail categorized inboxes, first-class labeling support (apply multiple, change color, etc), use all the Gmail aliases you have set up, use the signatures you set up in Gmail, and conduct server-side searches with Gmail search operators. A lot more is coming on this front, as the app is still in development. 2. This is a lighter-weight client with a minimal local cache. Mail downloads a copy of every message in your account and requires a lot more disk space to use.
  - m_b 6y ago
    Thanks for answering, i have a Gmail account that i barely use and i didn’t knew about all these features.
  - dmix 6y ago
    How was your experience working with the GMail API?
    - njhaveri 6y ago
      It's nice to have a RESTful API, and nice to access to more Gmail features, but there are several aspects where it is not as efficient as it could be, and multiple round trips are required with the server to perform some basic tasks that IMAP can execute in 1 round trip. It also has pretty aggressive request throttling, which is fine for a very thin client like Mimestream, but would not be a good fit for a client that wanted to download every message in the account.
brian_herman__ 6y ago
Can you make this a competitor to Thunderbird rather than being locked into GMail? I would love to have an app like this that used IMAP and was multiplatform!
- judge2020 6y ago
  https://news.ycombinator.com/item?id=24428666 https://news.ycombinator.com/item?id=24428666 The multiplatform part is completely dependent on if anything is done to get appkit and swiftui working on other platforms, which is probably a solid "no" for the foreseeable future. https://forums.swift.org/t/swiftui-for-non-apple-platforms-like-android-web-windows/25455 https://forums.swift.org/t/swiftui-for-non-apple-platforms-l...
deleted 6y ago
[deleted]
tomovo 6y ago
Screenshot on homepage shows Finder menubar, although the app is active. Looks a bit off.
- njhaveri 6y ago
  Oops. Thanks for pointing this out, it's fixed now!
  - saagarjha 6y ago
    While you're at it, you might what to stop time at 9:41 ;)
latchkey 6y ago
This is fantastic, please support Google Advanced Protection as I cannot add my account as a result of it being enabled on my account. "Advanced Protection prevented your Google Account from signing in. This security feature stops most non-Google apps and services from accessing your data to keep your account protected."
- pvg 6y ago
  Do you need the full advanced protection setup (hw key required for every session)? It does work with the somewhat less draconian normal key support where the key is required just for new logins.
  - latchkey 6y ago
    Yes, I like having something titled 'Advanced Protection' on my central Google account.
  - judge2020 6y ago
    AFAIK from my time in the APP, The "blessed session" system doesn't work any differently as I don't recall needing the key to access passwords.google.com or anything like that.
- dantiberian 6y ago
  > To prevent unauthorized access, Advanced Protection only allows Google apps and verified third-party apps to access your Google Account data, and only with your permission. - https://landing.google.com/advancedprotection/ https://landing.google.com/advancedprotection/ I didn't realise until now that third-party apps could work with Advanced Protection.
  - njhaveri 6y ago
    I didn't either. I'll be looking into this. Thanks!
    - njhaveri 6y ago
hyko 6y ago
This looks absolutely amazing. Nice one!
tensor 6y ago
Awesome, do you plan on integrating things like gmail tasks?
- njhaveri 6y ago
  Definitely planned ;)
  - judge2020 6y ago
    To add, calendar support would be nice.
jonathanberger 6y ago
Congrats on an amazing launch! You might though consider a new name before going to the App Store? Telling someone who doesn't read HN about your app would be very difficult because "mime" and "stream" aren't words people would expect next to each other. "Mime" is also a pretty uncommon word. Getting the early adopter crowd now who understand the name is important but this app has exciting potential I think for an audience beyond that.
- sedatk 6y ago
  Thunderbirds aren't common in the wild either.
  - samatman 6y ago
    Well, not lately, but there were plenty on the road when I was a lad. I do think the median user would be nonplussed by a name like Mimestream. One struggles to form a mental image of a stream of mimes, and I assure you that knowing that something called MIME exists is uncommon.
  - anadem 6y ago
    The name does tap into the psyche though, thanks to the ancient TV show - and Indigenous tales, of course, though those are probably less widely known.
- jsjohnst 6y ago
  Because “Amazon” is a name that in 1997 implied online bookstore? Or “Twitter” implied microblogging platform in 2008? I feel you’re over thinking it because you do know what MIME means in this case, for the average person that doesn’t, they very likely won’t think twice about it.
nguyenkien 6y ago
Any plan to support Outlook.com?
- deddo 6y ago
  Also interested. Would be good to have the ability to add standard IMAP accounts as well.
  - njhaveri 6y ago
    I am definitely interested in eventually supporting IMAP, JMAP, and Outlook in the long term. In the short term, the focus will be on making the Gmail support solid.
rShergold 6y ago
This is really interesting work. Have you paid the $15,000 for a security audit Google requires now for accessing the Gmail API. https://support.google.com/cloud/answer/9110914?hl=en https://support.google.com/cloud/answer/9110914?hl=en If so how was your experience going though the audit process?
- njhaveri 6y ago
  I had to go through a Google security review process, which took surprisingly long to get through (probably a good thing!). However, the $15k+ 3rd party audit is only necessary if you are running servers that have a copy of client data. Mimestream only caches email data on your Mac, so I didn't have to pay this fee.
  - deleted 6y ago
    [deleted]
jzting 6y ago
This is great! Will you be supporting the different type of inboxes e.g. "Important first"?
- njhaveri 6y ago
  I've received an overwhelming amount of feedback asking for this, and I plan to add this functionality.
deleted 6y ago
[deleted]
jedberg 6y ago
This looks great!! It's beautiful and lightening fast. I would definitely pay for this. Except for one thing. It doesn't seem to support priority inbox, which is critical to my workflow. My currently gmail inbox looks like this: in:inbox is:important is:unread in:inbox -l:important -is:updates -is:promotions -is:social in:inbox -l:important (is:updates OR is:social) in:inbox -l:important is:promotions in:inbox is:important is:read The only reason it's like that is because gmail limits you to five sections. Ideally I would split up updates and social. The first section is my triage section, and the only one whose unread count I care about. The rest I try to triage by skimming once a day and cleaning once a week. Then the last section is my "todo" section, things I have to respond to that will take more than a minute. So if I could customize the interface with the searches I want and in the order I want, that would be ideal. And then have a view where I can select how many messages from each section are visible at once (like in Gmail's multiple inbox view). If I could do that, I could easily see myself paying $100 for that, especially if it has a companion ipad/iphone app.
- njhaveri 6y ago
  Great feedback – I've gotten this request a lot today. It's been something I've always planned on doing, but based on the popularity of this request, this is a lot higher up on the list now.
  - jedberg 6y ago
    Awesome! If you need more feedback or want to actually watch me work in gmail, I'm happy to do a screen share. My email is in my profile, hit me up if you're interested.
  - ABS 6y ago
    it is indeed very similar to how I use gmail (both personal and work accounts) and the reason I've stuck to the web interface so +1000
  - interactivecode 6y ago
    Installed it but really miss the same categories as above! hopefully this can be added soon.
deleted 6y ago
[deleted]
bradgessler 6y ago
Would you please please please share what “Classic mode” is all about in Mail.app? I have this theory that a few important people at Apple protested killing it, so some poor soul had to add “Classic mode” to keep them happy while working on improving Mail.app.
josteink 6y ago
> Mimestream differs from other email clients because it uses the Gmail API rather than IMAP Technically speaking that make Mimestream not an email-client, but only a Gmail-client. It's only an email-client if it works with general email-providers, which this one clearly doesn't.
- SpelingBeeChamp 6y ago
  I think that's more than just a technical point. If someone sold me an email client that only supported one provider, I'd feel swindled. I would encourage them to reconsider their "email client" language. It's asking for a headache.
  - hombre_fatal 6y ago
    Let's not go overboard, you two. Their title on HN and website is "A native macOS email client for Gmail," and that's exactly what it is, especially if you were trying to be technical. It's like bickering that it's not a native client, it's a macOS client, because it only runs on macOS. Or that you'd feel swindled if it didn't run on Gentoo because anything that calls itself "software" when it's really "Macware" is basically false advertising. It's an odd attempt at pedantry.
    - josteink 6y ago
      > Their title on HN and website is "A native macOS email client for Gmail," and that's exactly what it is, especially if you were trying to be technical. "Email client" used to mean something before everyone started assuming Email = Gmail. Imagine someone submitting a link posted as "A web-browser for facebook.com". Nobody here would ever accept that a piece of software which could only work on facebook.com to be an actual web-browser. So why should we allow for the same exception when it comes to email?
planb 6y ago
Are you planning to support the "postpone" feature? This is the one thing that is missing for me when using gmail in Apple Mail.
- njhaveri 6y ago
  Would love to, but need Gmail API support. Please consider Starring (but don't comment +1): https://issuetracker.google.com/issues/109952618 https://issuetracker.google.com/issues/109952618
pjmlp 6y ago
Looks quite good, congratulations on having put the effort for a native app.
sixhobbits 6y ago
We do still have to trust you though right njhaveri? If I understand it correctly this is a closed source app with unlimited access to GMail. How can users be sure that it doesn't do stuff that you say it doesn't or that you are who you say you are, considering "Mimestream LLC" only has an email address and your HN profile has only ever posted about this one app? Hope that's not too aggressive :) legitimately curious if this is something that you've thought about or if you are planning on gaining reputation over time to the point where people will click through the scary "This app can delete all of your gmails" warning.
- rapnie 6y ago
  I notice that many, many software + service / SaaS are like that. "Sign up to our cool thing and see how well it works with all the PII you put in it. We are closed source, do not present our company, our team, or how we intend to earn money. No privacy policy too, but hey.. we do have a nice email" /endrant This really surprises me. I'd never try these out. Should be so easy to just be a bit more open. In this case at least the founder announces himself, which is a good start.
- danielbarla 6y ago
  It's a valid question, though I suspect that trust in a paid, MacOS-AppStore environment fundamentally works differently to the open source world.
- njhaveri 6y ago
  This is a very fair concern, and I sympathize with it a lot. I have thought about this a fair bit, and thought about eventually turning this into a "source-available" model (but not yet, I'd at least like to be fully launched on both App Stores first and have some user-base). There are pros and cons to that. At the end of the day, if you install an app from the App Store, you place trust in the developer. App Store Review only goes so far (e.g. look at Epic sneaking in an alternate payment system). Even if I made source available, the typical user has no guarantee that it matches the binary they're installing from the App Store. I've also thought about starting with an OAuth scope that allows all operations except permanently deleting email, and asking the user to re-authenticate and upgrade their scope the first time they try to permanently delete something. This is a little awkward from the user experience, though. Maybe burying this as a fallback mechanism during the onboarding flow is an option. General reputation-building is probably the right place to start.
aequitas 6y ago
Awesome. The only thing that drew me away from Apple Mail is the fact it didn't have build-in snooze functionality for emails like Gmail has. Does/will Mimestream support this too? To bad it has a macOS 10.15 requirement.
realityking 6y ago
First of all congratulations on a great looking app. I just set it up for my work account (I use a different provider for my private mail) and I love how I have all labels available. I'm also excited that you'll distribute it via the Mac App Store. My job these days is heavily email based, it sometimes feels like all I'm doing all day is jump between gmail, Slack and Zoom. Thus I've spent a lot of time optimizing my workflow with labels, etc. Unfortunately, I also rely on a lot of integrations with 3rd party services (through Chrome plugins): - Salesforce - Calendly - Grammarly If push comes to shove I can do without Calendly and maybe even without Grammarly but its entirely impossible for me to do my work. I dream of an email client like this but the unfortunate reality today is that anything not (easily) connected to certain other services is in a tough position for email power-users - or just people in weird jobs. Good luck. I'll keep an eye on Mimestream. Maybe at some point there'll be a plug-in API and an opportunity to bring some 3rd party services into the app.
- njhaveri 6y ago
  Thanks! I have been hearing the plugin feedback a lot lately, and I will be thinking about making a plugin API in the future.
x2f10 6y ago
I know this is a low quality comment, but I wanted to take a moment to say that I think this looks incredible. Sleek, professional, private, and packed with utility. Great work.
domoritz 6y ago
The app looks sleek. Do you plan to also support Gmail's smart compose feature or is that beyond what a native app can support?

robenkleene 6y ago

This is a great point: "There are no intermediary servers with access to your account or copies of your messages." A number of popular email clients use intermediary servers and that's a complete deal breaker for me. I'd argue that should be a deal breaker for almost anyone. I'm not a security expert, but as far as I can tell, for most people the single biggest security vulnerability is an attacker gaining access to their email. Using a mail client with an intermediary mail server essentially doubles the surface area attackers can exploit.

deleted 6y ago
[deleted]
dvtrn 6y ago
I never quite understood what the value add was for email-client developers to use intermediary servers. Is it to gather usage telemetry or something else?
- mappu 6y ago
  Pessimistically for telemetry, but I suspect some of them are Javascript apps in a lightweight shell that have actual technical difficulties making a TCP IMAP connection.
  - njhaveri 6y ago
    Yeah, I think difficulty making an IMAP connection is one reason. I think the biggest reason has been to decorate more features on top of the backing email service, like adding Snooze support to an arbitrary IMAP account (so the server can un-snooze a message at the scheduled time). That being said, there are security/privacy implications to that model, and I wouldn't personally use an app that works this way. That's why Mimestream was built as a traditional client.
  - scintill76 6y ago
    Doing TCP from a "native" JS app should be pretty easy[1] (caveat: I haven't tried.) I'd think the cost of running a proxy server would be enough motivation to figure this out, for any developer whose primary reason is as simple as technical difficulties with JS and TCP. I think it more likely the other responses such as doing heavy indexing that won't work as nicely on the clients. [1] https://stackoverflow.com/questions/41674063/is-it-possible-to-create-a-tcp-client-with-electron https://stackoverflow.com/questions/41674063/is-it-possible-...
- monadic2 6y ago
  Indexing and search can be sophisticated & available before downloading any messages; you can ensure completion of complex pop and imap operation (eg working with messages "tagged" by gmail); just a few benefits. Note, this is in no way an endorsement of middle manning email management and facading as a client.
- 6y ago
vladgur 6y ago
I was about to install it until i went through OAuth setup which grants the "Mimestream" application permissions do to a number of things including "Read, compose, send, and permanently delete all your email from Gmail" One can blame it on Google OAuth UI or on Mimestream UI, but its not clear to me whether these privileges are granted to the locally installed application and can only be used by it OR whether these privileges are Granted to "Mimestream" the Google OAuth App account which can then be used to do those actions outlined above by some service associated with "Mimestream" Google App. Needless to say, i chickened out from using my main google account with it and instead will test drive it with a toy account
- aptwebapps 6y ago
  I don't see much difference in the distinction between the client software (written by Mimestream, probably with regular updates) having access to your account, which it obviously has to has, and Mimestream having direct access. But IANA security researcher, so salt liberally.
  - vladgur 6y ago
    I mostly agree -- it takes a level of trust to provide your credentials to a third party app. However, there are precautions that you can do to minimize the risk of your credentials used without your authorization with a local client software: 1) requiring multi-factor authentication when credentials are used from a new location/device/ip... 2) A local firewall(like little snitch for osx) that surfaces any unexpected outbound requests. These obviously wont be much help if you grant some other server permission to access your email.
    - njhaveri 6y ago
      Tokens are granted to the app running on your Mac, not a service. There's definitely no Mimestream-run service component with access tokens to your account. One tip - on the Google OAuth sign-in page, you can inspect the URL's query component to see the redirectURL parameter, and you'll see where Google will send the token. In Mimestream's case, it is <long-custom-scheme>:/oauthredirect, which is a custom scheme registered with macOS by the app, so macOS shows you the "Do you want to allow this page to open Mimestream" prompt. This being said, you are totally correct, when you use any closed-source app like this that you did not build yourself, you are placing trust in the developer, and you are wise to be cautious. In my opinion, there are still several practical security/privacy downsides to apps that run intermediary services with access to (or copies of) your email: - A larger attack surface (the intermediary service) for an adversary to take advantage of, and one that is probably less hardened than Gmail - A larger bug surface, as the service could potentially accidentally expose your data to another user (and this sort of bug _has_ happened in the past to others). - Google probably has serious policies/systems in place for preventing a curious (or disgruntled) employee from reading your unencrypted email. Hopefully. That level of sophistication seems less guaranteed from a small company, and it's completely invisible to you as a user.

m_b 6y ago

Hi, i browsed through the website but didn’t find a comprehensive comparison with Apple Mail. Why not just using the default macOS email client?

Gaelan 6y ago
It sounds like the biggest difference is that it uses Gmail's API instead of MIME, so it has better support for Gmail features like labels.
njhaveri 6y ago
There are two main differences: 1. Mimestream uses the Gmail API (instead of IMAP), so it supports more Gmail features: Gmail categorized inboxes, first-class labeling support (apply multiple, change color, etc), use all the Gmail aliases you have set up, use the signatures you set up in Gmail, and conduct server-side searches with Gmail search operators. A lot more is coming on this front, as the app is still in development. 2. This is a lighter-weight client with a minimal local cache. Mail downloads a copy of every message in your account and requires a lot more disk space to use.
- m_b 6y ago
  Thanks for answering, i have a Gmail account that i barely use and i didn’t knew about all these features.
- dmix 6y ago
  How was your experience working with the GMail API?
  - njhaveri 6y ago
    It's nice to have a RESTful API, and nice to access to more Gmail features, but there are several aspects where it is not as efficient as it could be, and multiple round trips are required with the server to perform some basic tasks that IMAP can execute in 1 round trip. It also has pretty aggressive request throttling, which is fine for a very thin client like Mimestream, but would not be a good fit for a client that wanted to download every message in the account.

brian_herman__ 6y ago

Can you make this a competitor to Thunderbird rather than being locked into GMail? I would love to have an app like this that used IMAP and was multiplatform!

judge2020 6y ago
https://news.ycombinator.com/item?id=24428666 https://news.ycombinator.com/item?id=24428666 The multiplatform part is completely dependent on if anything is done to get appkit and swiftui working on other platforms, which is probably a solid "no" for the foreseeable future. https://forums.swift.org/t/swiftui-for-non-apple-platforms-like-android-web-windows/25455 https://forums.swift.org/t/swiftui-for-non-apple-platforms-l...

deleted 6y ago

[deleted]

tomovo 6y ago

Screenshot on homepage shows Finder menubar, although the app is active. Looks a bit off.

njhaveri 6y ago
Oops. Thanks for pointing this out, it's fixed now!
- saagarjha 6y ago
  While you're at it, you might what to stop time at 9:41 ;)

latchkey 6y ago

This is fantastic, please support Google Advanced Protection as I cannot add my account as a result of it being enabled on my account. "Advanced Protection prevented your Google Account from signing in. This security feature stops most non-Google apps and services from accessing your data to keep your account protected."

pvg 6y ago
Do you need the full advanced protection setup (hw key required for every session)? It does work with the somewhat less draconian normal key support where the key is required just for new logins.
- latchkey 6y ago
  Yes, I like having something titled 'Advanced Protection' on my central Google account.
- judge2020 6y ago
  AFAIK from my time in the APP, The "blessed session" system doesn't work any differently as I don't recall needing the key to access passwords.google.com or anything like that.
dantiberian 6y ago
> To prevent unauthorized access, Advanced Protection only allows Google apps and verified third-party apps to access your Google Account data, and only with your permission. - https://landing.google.com/advancedprotection/ https://landing.google.com/advancedprotection/ I didn't realise until now that third-party apps could work with Advanced Protection.
- njhaveri 6y ago
  I didn't either. I'll be looking into this. Thanks!
  - njhaveri 6y ago

hyko 6y ago

This looks absolutely amazing. Nice one!

tensor 6y ago

Awesome, do you plan on integrating things like gmail tasks?

njhaveri 6y ago
Definitely planned ;)
- judge2020 6y ago
  To add, calendar support would be nice.

jonathanberger 6y ago

Congrats on an amazing launch! You might though consider a new name before going to the App Store? Telling someone who doesn't read HN about your app would be very difficult because "mime" and "stream" aren't words people would expect next to each other. "Mime" is also a pretty uncommon word. Getting the early adopter crowd now who understand the name is important but this app has exciting potential I think for an audience beyond that.

sedatk 6y ago
Thunderbirds aren't common in the wild either.
- samatman 6y ago
  Well, not lately, but there were plenty on the road when I was a lad. I do think the median user would be nonplussed by a name like Mimestream. One struggles to form a mental image of a stream of mimes, and I assure you that knowing that something called MIME exists is uncommon.
- anadem 6y ago
  The name does tap into the psyche though, thanks to the ancient TV show - and Indigenous tales, of course, though those are probably less widely known.
jsjohnst 6y ago
Because “Amazon” is a name that in 1997 implied online bookstore? Or “Twitter” implied microblogging platform in 2008? I feel you’re over thinking it because you do know what MIME means in this case, for the average person that doesn’t, they very likely won’t think twice about it.

nguyenkien 6y ago

Any plan to support Outlook.com?

deddo 6y ago
Also interested. Would be good to have the ability to add standard IMAP accounts as well.
- njhaveri 6y ago
  I am definitely interested in eventually supporting IMAP, JMAP, and Outlook in the long term. In the short term, the focus will be on making the Gmail support solid.

rShergold 6y ago

This is really interesting work. Have you paid the $15,000 for a security audit Google requires now for accessing the Gmail API. https://support.google.com/cloud/answer/9110914?hl=en https://support.google.com/cloud/answer/9110914?hl=en If so how was your experience going though the audit process?

njhaveri 6y ago
I had to go through a Google security review process, which took surprisingly long to get through (probably a good thing!). However, the $15k+ 3rd party audit is only necessary if you are running servers that have a copy of client data. Mimestream only caches email data on your Mac, so I didn't have to pay this fee.
- deleted 6y ago
  [deleted]

jzting 6y ago

This is great! Will you be supporting the different type of inboxes e.g. "Important first"?

njhaveri 6y ago
I've received an overwhelming amount of feedback asking for this, and I plan to add this functionality.

deleted 6y ago

[deleted]

jedberg 6y ago

This looks great!! It's beautiful and lightening fast. I would definitely pay for this. Except for one thing. It doesn't seem to support priority inbox, which is critical to my workflow. My currently gmail inbox looks like this: in:inbox is:important is:unread in:inbox -l:important -is:updates -is:promotions -is:social in:inbox -l:important (is:updates OR is:social) in:inbox -l:important is:promotions in:inbox is:important is:read The only reason it's like that is because gmail limits you to five sections. Ideally I would split up updates and social. The first section is my triage section, and the only one whose unread count I care about. The rest I try to triage by skimming once a day and cleaning once a week. Then the last section is my "todo" section, things I have to respond to that will take more than a minute. So if I could customize the interface with the searches I want and in the order I want, that would be ideal. And then have a view where I can select how many messages from each section are visible at once (like in Gmail's multiple inbox view). If I could do that, I could easily see myself paying $100 for that, especially if it has a companion ipad/iphone app.

njhaveri 6y ago
Great feedback – I've gotten this request a lot today. It's been something I've always planned on doing, but based on the popularity of this request, this is a lot higher up on the list now.
- jedberg 6y ago
  Awesome! If you need more feedback or want to actually watch me work in gmail, I'm happy to do a screen share. My email is in my profile, hit me up if you're interested.
- ABS 6y ago
  it is indeed very similar to how I use gmail (both personal and work accounts) and the reason I've stuck to the web interface so +1000
- interactivecode 6y ago
  Installed it but really miss the same categories as above! hopefully this can be added soon.

deleted 6y ago

[deleted]

bradgessler 6y ago

Would you please please please share what “Classic mode” is all about in Mail.app? I have this theory that a few important people at Apple protested killing it, so some poor soul had to add “Classic mode” to keep them happy while working on improving Mail.app.

josteink 6y ago

> Mimestream differs from other email clients because it uses the Gmail API rather than IMAP Technically speaking that make Mimestream not an email-client, but only a Gmail-client. It's only an email-client if it works with general email-providers, which this one clearly doesn't.

SpelingBeeChamp 6y ago
I think that's more than just a technical point. If someone sold me an email client that only supported one provider, I'd feel swindled. I would encourage them to reconsider their "email client" language. It's asking for a headache.
- hombre_fatal 6y ago
  Let's not go overboard, you two. Their title on HN and website is "A native macOS email client for Gmail," and that's exactly what it is, especially if you were trying to be technical. It's like bickering that it's not a native client, it's a macOS client, because it only runs on macOS. Or that you'd feel swindled if it didn't run on Gentoo because anything that calls itself "software" when it's really "Macware" is basically false advertising. It's an odd attempt at pedantry.
  - josteink 6y ago
    > Their title on HN and website is "A native macOS email client for Gmail," and that's exactly what it is, especially if you were trying to be technical. "Email client" used to mean something before everyone started assuming Email = Gmail. Imagine someone submitting a link posted as "A web-browser for facebook.com". Nobody here would ever accept that a piece of software which could only work on facebook.com to be an actual web-browser. So why should we allow for the same exception when it comes to email?

planb 6y ago

Are you planning to support the "postpone" feature? This is the one thing that is missing for me when using gmail in Apple Mail.

njhaveri 6y ago
Would love to, but need Gmail API support. Please consider Starring (but don't comment +1): https://issuetracker.google.com/issues/109952618 https://issuetracker.google.com/issues/109952618

pjmlp 6y ago

Looks quite good, congratulations on having put the effort for a native app.

sixhobbits 6y ago

We do still have to trust you though right njhaveri? If I understand it correctly this is a closed source app with unlimited access to GMail. How can users be sure that it doesn't do stuff that you say it doesn't or that you are who you say you are, considering "Mimestream LLC" only has an email address and your HN profile has only ever posted about this one app? Hope that's not too aggressive :) legitimately curious if this is something that you've thought about or if you are planning on gaining reputation over time to the point where people will click through the scary "This app can delete all of your gmails" warning.

rapnie 6y ago
I notice that many, many software + service / SaaS are like that. "Sign up to our cool thing and see how well it works with all the PII you put in it. We are closed source, do not present our company, our team, or how we intend to earn money. No privacy policy too, but hey.. we do have a nice email" /endrant This really surprises me. I'd never try these out. Should be so easy to just be a bit more open. In this case at least the founder announces himself, which is a good start.
danielbarla 6y ago
It's a valid question, though I suspect that trust in a paid, MacOS-AppStore environment fundamentally works differently to the open source world.
njhaveri 6y ago
This is a very fair concern, and I sympathize with it a lot. I have thought about this a fair bit, and thought about eventually turning this into a "source-available" model (but not yet, I'd at least like to be fully launched on both App Stores first and have some user-base). There are pros and cons to that. At the end of the day, if you install an app from the App Store, you place trust in the developer. App Store Review only goes so far (e.g. look at Epic sneaking in an alternate payment system). Even if I made source available, the typical user has no guarantee that it matches the binary they're installing from the App Store. I've also thought about starting with an OAuth scope that allows all operations except permanently deleting email, and asking the user to re-authenticate and upgrade their scope the first time they try to permanently delete something. This is a little awkward from the user experience, though. Maybe burying this as a fallback mechanism during the onboarding flow is an option. General reputation-building is probably the right place to start.

aequitas 6y ago

Awesome. The only thing that drew me away from Apple Mail is the fact it didn't have build-in snooze functionality for emails like Gmail has. Does/will Mimestream support this too? To bad it has a macOS 10.15 requirement.

realityking 6y ago

First of all congratulations on a great looking app. I just set it up for my work account (I use a different provider for my private mail) and I love how I have all labels available. I'm also excited that you'll distribute it via the Mac App Store. My job these days is heavily email based, it sometimes feels like all I'm doing all day is jump between gmail, Slack and Zoom. Thus I've spent a lot of time optimizing my workflow with labels, etc. Unfortunately, I also rely on a lot of integrations with 3rd party services (through Chrome plugins): - Salesforce - Calendly - Grammarly If push comes to shove I can do without Calendly and maybe even without Grammarly but its entirely impossible for me to do my work. I dream of an email client like this but the unfortunate reality today is that anything not (easily) connected to certain other services is in a tough position for email power-users - or just people in weird jobs. Good luck. I'll keep an eye on Mimestream. Maybe at some point there'll be a plug-in API and an opportunity to bring some 3rd party services into the app.

njhaveri 6y ago
Thanks! I have been hearing the plugin feedback a lot lately, and I will be thinking about making a plugin API in the future.

x2f10 6y ago

I know this is a low quality comment, but I wanted to take a moment to say that I think this looks incredible. Sleek, professional, private, and packed with utility. Great work.

domoritz 6y ago

The app looks sleek. Do you plan to also support Gmail's smart compose feature or is that beyond what a native app can support?