20 ms·

Protonmail can delete the wrong email and nobody cares

438 points by julienpalard 4y ago

jakeogh 4y ago
If anyone is interested in rolling their own, I have used this since early 2012: https://github.com/jakeogh/gpgmda https://github.com/jakeogh/gpgmda
chuckdotis 4y ago
I've been a paid Protonmail user for a while now, but it seems like if you don't use their webmail site or their mobile app, you don't get a very good experience. The Protonmail Bridge with Thunderbird (the only somewhat supported desktop mail client on Linux) has always been buggy at times, such as archiving not working as expected, or creating a new mail subfolder in Thunderbird creates a parent folder with a "/" in front of it in web mail. I understand there's probably some difficulty keeping everything E2E encrypted on the desktop side of things, but Thunderbird feels crippled if you want to use it with Protonmail/Bridge. For example, calendar doesn't work at all. I love what Protonmail has been trying to do and have done, but all I really want is to be able to use a desktop mail client with calendar, and the Protonmail Bridge is not there yet. My subscription is up in January, so I may switch to something like Fastmail for the time being.
alcoholic_byte 4y ago
Well looks like Proton invested too much in advertisment. They also run VPNs and, although they offer setup via confi-files, frustrate their customers by telling them the problem is on their side and demand they install that piece of software of theirs. Switching VPN providers without changing my setup and it was clear as day, the problem does not reside with me but them. Instable connection, bullshit support telling you it is your fault and you do not know what you are doing... Immediately quit their service. i do not know how you would want to pay a service from such a company.
drclau 4y ago
Proton Bridge has a local cache, which can be disabled. I do wonder if doing so would fix this problem.
bartbutler 4y ago
This is Bart, Proton CTO here. For clarity, the issue mentioned here only impacts Proton Mail Bridge, our desktop IMAP/SMTP gateway to Proton Mail encrypted email. The fact that Bridge and its client can become desynchronized sporadically for some users is a high priority issue we have been working on. Bridge is open source, and as a result relies upon open-source components, and the root cause is an architectural issue in a library that Bridge uses to implement IMAP. When there are network issues, this library returns errors to email clients. Unfortunately, there are hundreds of email clients, and some email clients don’t handle errors properly, and this leads to desynchronization. Our error tracking shows this does not happen often (1-2% of Bridge users) and the symptom is usually incorrect display of messages or read/unread status which is fixed with an inbox resynchronization. There are cases where a combination of a desynchronized mailbox and a specific series of user actions can lead to accidental email deletion, but this is far rarer than desynchronization. Our implementation tries as hard as possible to avoid this. If you find you are missing an email, our implementation works around the issue by placing it in a users’ All Mail folder. As Bridge is open source, updates on this issue have always been publicly posted on GitHub. Addressing this issue at the source requires replacing the core IMAP library. Unfortunately, there are no FOSS IMAP libraries that are sufficiently well maintained. Therefore, the solution is to build our own IMAP library called Gluon, which we have been focusing on since this issue was reported to us. You can follow the progress of this open-source project here: https://github.com/ProtonMail/gluon https://github.com/ProtonMail/gluon We are not refusing to fix the problem. The only possible solution is writing a new open-source IMAP library which we can maintain ourselves to ensure this class of errors cannot occur again. We have doubled the size of the team working on this this year so it is a priority for us. We’re confident that this addresses the main sources of desynchronization and will be available in the beta version of Bridge by the end of the year.
- twleo 4y ago
  > Bridge is open source, and as a result relies upon open-source components I don't get it. Bridge is open source does not imply it should relies upon open-source components. > Addressing this issue at the source requires replacing the core IMAP library. Why building an IMAP library from scratch instead of fixing/forking go-imap? Even a temporary fix to go-imap when you are developing gluon? Another repetitive work which does not guarantee the mentioned issues will be resolved completely.
cycomanic 4y ago
I'm not surprised. In my experience mail synchronisation with IMAP is fraught with edge cases that cause weird issues (I definitely had weird states happening with offlineimap and Co). I really wish JMAP will take off and give us a much better mail protocol.
jbirer 4y ago
The majority of Protonmail accounts are used for dealing drugs on the darknet and similar things, nobody really cares much about bugs.
- keneda7 4y ago
  I would disagree. Sure protomail may be used by nefarious actors but there are also plenty of security minded people that use it too. A majority of those users are not doing anything nefarious at all. They simply don't want anyone snooping on their emails.
highwaylights 4y ago
They also don’t care about locking you permanently out of your own e-Mail with no warning, for no reason, with no recourse. Honestly - there are far better options out there. They’re not in anyway a responsible enough business to manage an e-mail service. It’s run more like a hobby project than critical infrastructure.
- mr_mitm 4y ago
  What are those better options that HN likes? I just switched all my accounts to protonmail, but stories like this make me want to reconsider. The fact that they won't allow me to set up a forwarding rule in case I want to switch again doesn't help.
  - gobip 4y ago
    HN is hooked on fastmail which is a great provider to be honest. Have a look at mailbox.org which is in business since the 90s too. Avoid the privacy trending providers promising you to encrypt your emails.
    - akvadrako 4y ago
      I second mailbox.org. Didn't want to use fastmail since it's based in Australia instead of the EU.
    - twleo 4y ago
      FastMail takes on PGP is very reasonable. https://fastmail.blog/advanced/why-we-dont-offer-pgp/ https://fastmail.blog/advanced/why-we-dont-offer-pgp/ I don't believe the encryption/key management from a company.
  - Toutouxc 4y ago
    First of all, bring your own domain. That way you can just point the same address elsewhere if you need to switch again without having to deal with forwarding. edit: As mentioned by a sibling comment, my email is currently on Fastmail, zero problems.
spindle 4y ago
The comments in the linked thread are shocking. One person says they lost a job because of email lost by ProtonMail.
- grammers 4y ago
  I like Tutanota better anyway as it has better value and is truly FOSS (app without Google push is a must for me).
  - rossmohax 4y ago
    I had to move off tutanota when I discovered they don't offer offline access to email. Protonmail claims to support offline access, but in every rare occasion I needed it, it wasnt working for me.
    - grammers 4y ago
      >I had to move off tutanota when I discovered they don't offer offline access to email. They do have offline support now as far as I know.
- deleted 4y ago
  [deleted]
jaimehrubiks 4y ago
What is shocking is the lack of communication from their side.
- deleted 4y ago
  [deleted]
encryptluks2 4y ago
This sort of reaffirms my belief that UIDs are not sufficient for syncing mail. Emails should be hashed and synced by the hash which would solve other issues, like being able to redownload specific messages that may have got corrupted locally.
- jrootabega 4y ago
  Even so, isn't this a violation of the IMAP standard, which says that UIDs are, by design, not permanent identifiers, but UID + UIDVALIDITY is? (I don't know much about IMAP.)
  - encryptluks2 4y ago
    It is definitely a recommendation, but UIDVALIDITY just checks the folder from what I understand. Hashing the entire message would be the best way from my understanding to sync messages.
  - cryptonector 4y ago
    No, RFC 3501 says > The unique identifier of a message MUST NOT change during the > session, and SHOULD NOT change between sessions. Any change of > unique identifiers between sessions MUST be detectable using the > UIDVALIDITY mechanism discussed below. Persistent unique identifiers > are required for a client to resynchronize its state from a previous > session with the server (e.g., disconnected or offline access > clients); this is discussed further in [[IMAP-DISC](https://www.rfc-editor.org/rfc/rfc3501#ref-IMAP-DISC https://www.rfc-editor.org/rfc/rfc3501#ref-IMAP-DISC)]. so, "SHOULD NOT", but in practice it's really hard to make {UID, UIDVALIDITY} assignments persistent and unique, so IMAP servers don't, and as you can see, they are allowed to not. I.e., it's perfectly compliant to generate a new UIDVALIDITY for each session and then assign UIDs to emails in folders when you open them
- ogogmad 4y ago
  Can hashes not collide? Would that not cause problems?
fishclimbingice 4y ago
psychphysic 4y ago
This is such a serious bug in the context of email that the surely must take this out of stable status?
- Maxburn 4y ago
  They don't have anything to replace it with yet. They appear happy to leave it in place being buggy instead of removing it and really upset a lot of people.
  - deleted 4y ago
    [deleted]
kkfx 4y ago
My own mail policy is simple: - a hosted service because host one myself is too much work CAUSED by anti-spam measure by some "self-appointed sheriffs" of the net; - mail fetched from remote via fetchmail, no messages left on the server, filtered on my homeserver via maildrop, indexed via notmuch, muchsync-ed over SSH to desktop(s)/laptop. That's is.
- midenginedcoupe 4y ago
  I think we have very different understandings of the word "simple".
  - kkfx 4y ago
    Simple meaning: I'm not tied to anyone specifically (personal domain name) and I own my data. They are also on someone else iron, but also on mine and I use them locally. Composing a new mail is just hitting a key on my keyboard, searching my messages like GMail is another key for search&narrow results a modifier+the same key for notmuch-emacs UI. All mails can be linked on all my org-mode/org-roam managed docs equally. It's FAR simpler and FAR more powerful than any modern crapware UI, BUT is hard to setup due to the little development compared to the mainstream UI.
- uselpa 4y ago
  I like that, any pointers for a Linux-based fetchmail/getmail setup?
  - kkfx 4y ago
    So far I've not documented much my setup (but feel free to ask specific questions) I found nice to bookmark: - https://www.howtoforge.com/procmail_tips_recipes https://www.howtoforge.com/procmail_tips_recipes - https://dnns.no/switching-from-procmail-to-maildrop.html https://dnns.no/switching-from-procmail-to-maildrop.html Who have a little fetchmail part. I've nerve used getmail, before I've used OfflineIMAP (buggy but support IMAP IDLE) and mbsync. The only issue is fetching from multiple accounts that demand firing up multiple instances, but that's not much of an issue. You just set FETCHMAILHOME before any invocation pointing to the right config dir and set a different --pidfile for concurrent* fetching if you wish so. MailDrop is a (very) little (very) big setup since you need filters for anything if you are not a piler and that take MUCH time. Normally here my suggestion is fetch anything on a zfs volume, clone it, test on the cloned maildir or snapshot and revert after any test until you get nothing in the INBOXes. A slow step at a time you'll add the rest.
sokoloff 4y ago
The first clue might have been the UID for an in-use mailbox with over 50K messages being 51950.
- urbandw311er 4y ago
  Can you elaborate on your thinking?
  - sokoloff 4y ago
    If you’ve been using your mailbox (and deleting mail) for a while, have over 50K mails in it now, and see (what you think is) a UID of 51950 on the most recent email, the chances that it’s “U” are extremely low, meaning there’s a gap in understanding or in implementation.
    - josephg 4y ago
      Every time I see that, I’m floored by it. The fact that message IDs in IMAP change when you delete messages has got to be one of the worst design choices in any in-use protocol. I’m flabbergasted by it. The sooner everyone moves to jmap the better.
      - cryptonector 4y ago
        It's an artifact of IMAP having evolved in the presence of older mailstore technologies like mbox and maildir that couldn't easily accommodate long-term stable message IDs. It's fine though, as long as the MUA developers understand this and don't expect UIDs to be more stable than they actually are.
      - harha_ 4y ago
        IDs change? Wtf indeed...
      - himinlomax 4y ago
        > The fact that message IDs in IMAP change when you delete messages IDs can also change between sessions, and can be different between simultaneous sessions.
pkrumins 4y ago
How does Protonmail compare to Gmail? Has anyone switched to Protonmail from Gmail?
- Eumenes 4y ago
  I switched a few weeks ago. The process was fine. They have a tool to help you port your mailbox, calendar, contacts. The web client is great. The mobile/android app sucks. The search doesn't work. If you archive an email on web, it wont always apply to the app. The sync between clients is screwy. Gmail is no doubt a better email product but given I paid a year, I'm going to suck it up and deal with it.
- cpburns2009 4y ago
  I switched from Gmail to Proton Mail earlier this year in an attempt to de-Google. The Proton Mail website and Android app is just about on par with Gmail's. My only complaint is Proton Mail will refuse to load images if something about the host domain isn't configured 100% to spec which is common for non-tech companies such as home utilities. You can only reply from "+tag" addresses, not send outright from them which is a feature of Gmail. Though Proton Mail's email aliases alleviates my need for that.
Manjuuu 4y ago
Since I've used this for years, way before this ticket, the bridge has always been problematic (periodic full mailbox downloads even with the QT version for example), but since the version with the new ui it got even worse, emails coming and going.
shp0ngle 4y ago
Their approach is "we know it's an issue, we are _rewriting everything_ to a new version, in the meantime suck it up lol"
- deleted 4y ago
  [deleted]
petesergeant 4y ago
> the reason why we're not putting top prio on this at the moment is that we're doing a significant rewrite The amount of bad, long-lived bugs that aren't addressed because "we'll rewrite it any day now!" in many software organizations is very upsetting
- deleted 4y ago
  [deleted]
that_lurker 4y ago
Could the title be update to contain the word bridge as the issue is in the Protonmail bridge application and not on Protonmail itself. The entire title is clickbaity, but adding the birdge moves it away from being misleading.
- ogogmad 4y ago
  The problem is they've been aware of this very serious bug for more than a year, and haven't tried informing their users. So "Protonmail" in this context refers to the business, and the issues surrounding their responsibility, competence and ethics.
  - NayamAmarshe 4y ago
    The business is just 'Proton' though, ProtonMail is one of their offerings.
    - coldtea 4y ago
      Doesn't matter much, if most refer to them by ProtonMail, by their main product. Same way people would refer to "Facebook" meaning the whole of Meta
  - miohtama 4y ago
    If there is a critical issue with an open source software any user can fix it. If no user steps up then it might not be that important issue in the first place.
    - coldtea 4y ago
      Or it's important, but nobody has the skills/time/familiarity/acceptance from upstream maintainers combo. Compared to the FOSS origin myths, many huge projects, with tons of end users, including very foundational ones, like GTK+ and OpenSSL and such, are understuffed (or just 1-2 base maintainers heavily overworked, who do 99% of the work and can't take it anymore), and nobody cares or has the time to dive in and fix anything. Other projects that might have some person interested to bugfix, have maintainers that don't like contributions outside a clique, and ignore bugfixes submitted for years or forever. So, "any user can fix it" is sometimes just in principle, while actual users than can fix and do fix it are thin on the ground, and othertimes it's just an option for external patches, that will not be merged upstream.
deleted 4y ago
[deleted]
stblack 4y ago
To clarify because comments (so far) seem to ignore what Proton Bridge does. Proton Mail is web mail, like Gmail. That part is fine. You use Proton Bridge as a connector to mail client software. The thing that’s perhaps unclear is, Proton Mail is end-to-end encrypted email. You use Proton Bridge to walk your secure email beyond that enclave into whatever YOU are running in your userland scenario. Part of all this is, you’re completely unclear on the concept of secure email the moment you need to use this bridge. Which begs the question, why would you use Proton Mail if you’re gonna negate its unique value proposition? Proton Mail is fine. It’s this misguided extension that’s the problem here. If you’re fine with web mail then this issue doesn’t matter. If you’re not fine with web mail, maybe Proton Mail isn’t really for you.
- jrootabega 4y ago
  The bridge is just another client in the sense that any ProtonMail client would need to decrypt emails so you can view them. To be honest, their web client is probably less secure and trustworthy than other mail toolchains you could run locally. So if the bridge was reliable and trustworthy (which it may not be, hence this submission), using it is probably the most secure option.
  - stblack 4y ago
    “ To be honest, their web client is probably less secure and trustworthy than other mail toolchains you could run locally. ” To be honest, you’re guessing amirite? Be honest. Bizarre statement, it’s like in-browser security doesn’t exist? The password manager browser extension you may use, that’s Swiss cheese right?
    - jrootabega 4y ago
      You're not looking for a discussion, but rather a fight. I hope you find some peace. Understand that not everyone who responds with a counterpoint also downvoted you. But I'll respond once in good faith - a browser, which is designed to load and run obfuscated remote scripts from quasi-trusted sources, and display complex untrusted HTML mail content, and which is subject to XSS vulnerabilities, will always be inherently less secure than, e.g., mutt. It exposes you to potentially malicious second parties (e.g. ProtonMail) and third parties. This is true regardless of any mitigations and security measures that are also built in to the browser. If you have enough distrust in your threat model to use ProtonMail, you also likely acknowledge the browser's weaknesses.
st_goliath 4y ago
For a bit of context/back-story, Richard, who opened this issue, later also wrote a blog post about the whole ordeal: https://blog.sigma-star.at/post/2022/07/protonmail-adventure/ https://blog.sigma-star.at/post/2022/07/protonmail-adventure... In short: The idea was to move from a custom mail server to a paid, hosted solution. ProtonMail was chosen, with the bridge being used to get mails into a local mail client. Issues with the bridge eventually cropped up.
MrDresden 4y ago
I've been a paying Protonmail customer for years and recently started worrying about having put my eggs into the Protonmail basket. /rant Recent outage issues surfaced some major flaws with the mobile clients, on top of shaking my faith in the infrastructure (though no one can easily stand up to nation state actors so I do not blame PM). And yesterday I was shown ads inside the web portal, along with a big call-to-action button that wasn't there before to go buy a new tier. Have I mentioned that I have been a customer already for years? Never used the bridge, but honestly I am not surprised that it may be broken and not receiving the attention it deserves. It feels like Proton (with its vpn, email and the whole 'suite' they are promoting under the brand) is simply another growth company, focused on adding more and more features rather than on good old fashioned stable products.
- badpun 4y ago
  > Never used the bridge, but honestly I am not surprised that it may be broken and not receiving the attention it deserves. The bridge was broken in the past, but since around maybe 2-3 years it seems to be working fine.
  - Natfan 4y ago
    According to the linked GitHub issue, bridge is not fine and is deleting messages.
- jrootabega 4y ago
  I think we're at a pretty clear turning point in the "scorpion and frog" fable. Continue into the river at your own peril.
- Aaronmacaron 4y ago
  I also got this ad yesterday when I opened PM. It's the kind of ad you'd expect from a free tier but not as a paying customer. At first it made me wonder if my subscription had expired.
- ulimn 4y ago
  Do you mean the ad about the Visionary subscription? I'm also a paying customer but I'm OK with these one-time notification kind of ads about the product I'm using. Just don't shove it in my face every time I open it.
Havoc 4y ago
List of providers that don’t have issues is shrinking rapidly
- nik282000 4y ago
  I just started the switch when I found this thread. Back to megacorp mail I guess?
thih9 4y ago
I didn't know what exactly is proton mail bridge. This is what I've found: > Proton Mail Bridge is a desktop application that runs in the background, encrypting and decrypting messages as they enter and leave your computer. It lets you add your Proton Mail account to your favorite email client via IMAP/SMTP by creating a local email server on your computer. Source: https://proton.me/mail/bridge https://proton.me/mail/bridge
- s3p 4y ago
  Protonmail doesn't support email clients with POP/IMAP like most hosting companies do. They only let you use their proprietary apps on mobile. Desktop users can log in to the website or use Bridge which is just a hacky way of creating a local Protonmail server that your email client thinks is a hosting provider. I could never get it set up on my machine so I just used the browser implementation. sigh.
  - _def 4y ago
    They aren't offering IMAP as an email provider? What's up with that?
    - qu4z-2 4y ago
      I don't know, and it's why I moved off them. Additionally, the Bridge is only available for Windows/Linux/Mac, so if you want to use your own email client on mobile, I guess your only option is to VPN into your home network and expose a bridge instance there or something. No hard feelings, but I can't really recommend them as an email host if what you're looking for is... an email host.
    - bakoo 4y ago
      If they offer IMAP, they would also need to decrypt your data on their side, which I'm happy they go to lenghts to avoid. This is a case of Proton sacrificing convenience for privacy. If the former is more important for you than the latter, there are better alternatives out there.
iicc 4y ago
JMAP is a replacement for IMAP. Unlike IMAP it has immutable IDs[0] but not much support[1]. [0] https://jmap.io/#faq https://jmap.io/#faq [1] https://jmap.io/software.html https://jmap.io/software.html
- cryptonector 4y ago
  Emails should really be identified by Message-Id (which isn't guaranteed unique, but is very selective) and a hash of the body and a subset of the headers (e.g., excluding Received headers, and maybe using only Message-Id, Date, and From, maybe not even Subject). A good email store is very searchable, and a good MUA searches email, and a good MAP gives the client temporary (ephemeral) handles for "open" emails.
- tete 4y ago
  I think it's sadly a bit of a chicken and egg problem, unless someone sets out to write support for servers (mostly dovecot I assume) and clients (web and desktop). It would be worthwhile for many reasons not just the immutable IDs. I'd certainly donate to someone showing initiative working on this.
sneak 4y ago
A good workaround for email hosting is to run an IMAP server somewhere you control, and add it to your mail client. The server doesn’t need 24/7 five-nines or anything. It’s not for receiving mail. It could even be on your local laptop if that is the only place you need old mail, though I keep mine on a dedicated hosting machine in a colo so I can use/search it from my iPhones and iPads and other workstations. You use an IMAP compatible email service like Proton or whatever to receive and check mail like normal. A couple times per month, move all the messages from the service to your own IMAP server’s folders, instead of the “archive” command that moves them to a different folder on the same server that received them. This is pretty straightforward in Apple’s Mail.app on macOS, and I imagine similarly so in most GUI IMAP clients. This gives you the best of both worlds: a single set of maildir folders on your own server you can zip or back up with normal tools like rsync or whatever, as well as 24/7 HA reliable provider servers to receive incoming mail at all times in case your long term mail storage machine is temporarily down. You also won’t bump up against provider storage limits. Self-hosting inbound and outbound email is a drag (though I do it for many of my less critical domains), but a 90% availability selfhosted message storage IMAP service is fairly easy to run. This has the added benefit of a provider hack or legal process presumably affecting only a subset of your most recent messages due to those being the only ones stored there. I am a Proton and FastMail user (and use the affected software) but I regularly move all the messages from these providers to my IMAP storage server (in different folders) so if their systems fail the blast radius is not “all of my emails going back to whenever I started using the provider”.
- megous 4y ago
  > The server doesn’t need 24/7 five-nines or anything. It’s not for receiving mail. You don't need 24/7 server for receiving email. You can have it offline for a day or two a week and you'd only lose maybe some spam. I'd call that involuntary graylisting. :D
  - sneak 4y ago
    Many services use email-based login links or other second-factor codes. Email being offline means you can’t log in to or use these services.
tacker2000 4y ago
Yea the bridge is quite a hot mess, really. I use it with Outlook on Mac and there are always syncing issues, passwords missing and i have to re-sync the whole inbox every 2 months or so. I didnt realise some mail got deleted though, i need to investigate that. I am a proton customer since 3 years and they seemed like a good bunch but now with all the stuff they are offering it seems like they have lost their way. There is also no way of integrating the proton calendar into a 3rd party app like Outlook. This feature has been promised forever…
MomoXenosaga 4y ago
Been using Outlook for 15 years (remember Hotmail lol) and never had a problem with them. Paying for email seems so weird.
- OneLeggedCat 4y ago
  Around 2003 Hotmail deleted half of my emails. I was able to reach an actual Microsoft employee, who apologized a lot (this happened to a lot of users nationally that day), and told me they were gone permanently. They weren't even backing up these emails. Glad that you have had no problem with them. I haven't either since leaving them behind.
- ThePowerOfFuet 4y ago
  > Paying for email seems so weird. If you are not paying, you are what is being sold.
- bkishan 4y ago
  Paying for email with money seems so weird. FTFY.
jdthedisciple 4y ago
why would you rely on a 5 digit number for unique identification rather than something like a g/uuid?
- jeroenhd 4y ago
  IMAP UIDs aren't unique IDs per message, they are an incrementing number assigned to a message that's unique per mailbox ("folder"). Their incrementing nature is part of the standard, a random number would likely break mail clients. They should be stable between sessions but when you move a message back and forth between folders, the UID changes every time. There are events where the UIDs change, for example when a server needs to rebuild its indices after corruption, but those should be extremely rare. Your server should also show this change when asked for UIDVALIDITY. A message is defined by (UID, UIDVALIDITY, folder name). If this tuple changes, the message needs to be refetched. It's not the best mechanism for supporting multiple mail clients at once but it's easy to implement at least.
  - cryptonector 4y ago
    BTW, "unique per-mailbox" utterly fails to be sufficient in a post-gmail labels-as-folders world. That's because folders are lame. But doing better than folders really makes you want a relational database for email.
ianhawes 4y ago
Not specific to this bug, but I recently setup a hosted Protonmail account with a custom domain and got myself and my wife on it because we do not trust G suite and don’t want all our eggs in one basket. We both use the native mobile app and web based mail client. In general it’s useable but the search functionality is useless. I’m hoping they’ll improve it.
polaris64 4y ago
I've suffered from exactly the same issues with Protonmail Bridge, and just this last weekend I decided (reluctantly) to move to a more standard mail provider (I chose Mailbox.org). Aside from the UID issue discussed I also had problems with Bridge not supporting my particular use-cases. I created my own fork (see https://github.com/polaris64/proton-bridge https://github.com/polaris64/proton-bridge) to work around some limitations and to add features, but maintaining this was too much work, especially as paying for a mail provider was supposed to reduce maintenance burden. I have had a pull request open since the 23rd of June to merge these to the upstream version, but so far I haven't received any comments from the Proton team. I like ProtonMail, I just wish Bridge was more standards-compliant.
- rOOb85 4y ago
  +1 for mailbox.org I've been using them since around 2015 and they have been excellent.
himinlomax 4y ago
> Finally I found the proof that UIDs as presented by ProtonMail Bridge are not stable: Yeah well that's IMAP-compliant. IDs can change between sessions, that's always been part of that terrible standard.
begueradj 4y ago
I stopped using it anyway since "ProtonMail logged IP address of French activist after order by Swiss authorities" (Which thing was against the promise they made to users publicly on their website by that time)
- deelly 4y ago
  So, you don't use email at all now? Is it possible?
  - begueradj 4y ago
    With Gmail & Co. I accept that for free. With Protonmail, I have to pay for that (for my privacy to be disclosed), after a certain small space quota That's what I mean
  - jrootabega 4y ago
    Once a day you can export your emails to a web server, where you can curl them at your leisure.
madsbuch 4y ago
Proton mail has a great mission and I generally enjoy their solution. But it is one of the worst UXs I have ever paid for. The app rarely works and is slow. Clicking notifications results in an infinite loading screen resulting in you needing to find that email manually. I am sure this is blamed on the encrypted backend, but to me it just seems lazy regarding UX.
- deleted 4y ago
  [deleted]
codeptualize 4y ago
I switched to Proton a few months ago, I quite like it. The outage a while back and this do worry me a little bit, but for me it's not enough to switch as I don't use the bridge, it has worked really well for me, and don't really like the alternatives for various reasons. I do think it's relatively early stage. Yes, the email product has been around, but the more business orientated suite of products seems very early. The email app misses some functionality, but what's there works and looks great. Calendar is progressing nicely. Drive is kinda useless beyond file sharing atm, it really needs a sync app to be useful. Another qualm I have is that you can't buy extra storage, custom domains, etc. It makes little sense to me, for now it's fine, but at some point it might force me to find a different solution. They certainly have a lot of work to do, and they need to get a grip on issues like this asap, but I'm willing to wait it out for a bit as I do like the direction, I think there is a lot of potential. That said I am not sure I would move the company over to Proton like the issue raised, idk if it's ready for that.
- bt4u 4y ago
ThePowerOfFuet 4y ago
>We had to accept that it is not a perfect fit for our use-cases. Rarely have I seen such mastery of the art of understatement. I hope they check out Migadu, which has been excellent for me — and would seem to be a much better fit for them, too.
antpls 4y ago
Some years ago, I evaluated Protonmail as a replacement for my personal gmail account. When came the steps "can I easily move from this service?", I realized you have to _pay_ to export all your emails from the service. They make it super easy for you to open an account and receive emails, and then makes you pay if you want to get a copy of your own data. I contacted the support to tell them it is likely illegal under European Data Privacy laws. They replied I can still export email for free one by one if I wanted to... (which is obviously not a valid answer when you have 5000 emails) Then I looked in Swiss laws for a similar clause, and found that Swiss laws doesn't give users of online services the right to easily and freely get a copy of their data. It was a law proposal at the time of my research. So yeah... Your data is so secure in Switzerland that you don't even own your data !
- deleted 4y ago
  [deleted]
- flupe 4y ago
  Nowadays they do provide an app (Import-Export) to export all your mail, even for free tier accounts, so it's quite easy to move away. See: https://proton.me/support/export-emails-import-export-app https://proton.me/support/export-emails-import-export-app
  - julienpalard 4y ago
    Which is close-source (or I didn't find it in their github repo).
    - psyfi 4y ago
      Does it - legally - matter?
      - memorable 4y ago
        For those who care about OSS and moving to Protonmail from bigcorps email, this _might_ matter, although I think that for the majority of Protonmail users (which doesn't care much about open source), it doesn't matter.
ta988 4y ago
Yeah I migrated less than a year ago to proton but it is bug over bug (gpg not handled properly), this UID bug, nagging to pay for a larger plan. I'll probably migrate to fastmail (or if you have other recommended alternatives) at the end of this billing cycle.
BirAdam 4y ago
Okay, rather than just complaining, I suppose we should gather alternatives, right? mailbox.org hey fastmail tutanota mailfence disroot posteo barracuda (for businesses) vivaldi mail mailpile countermail hushmail I haven't used any of these, so if anyone has others or has experience with any of these, please share your experience.
- ravenstine 4y ago
  Someone can come up with a reason to not use any of these. And yeah, this UID situation with Protonmail is not good. As a long-time Protonmail customer, I've been concerned that they seem to have gotten bored with keeping a stable product. Back to the point... I still will be using Protonmail because no product is perfect. For example, Fastmail I believe is in Australia which is one of the last western nations where I would want my data to be stored. I wouldn't use them, but does that mean someone else shouldn't use them? Not really. All of these products have tradeoffs. Since Protonmail's delete function is likely to still work most of the time, I won't yet be abandoning them. Fact is that I find all of the alternatives preferable to relying upon The Google.
- kompatible 4y ago
  Mailbox.org is a great service, good support for custom domains. Also can use Exchange protocol so push notifications for emails (on iPhones at least) are possible
- ginsbergjason 4y ago
  Skiff http://skiff.com/ http://skiff.com/
- seekingsolution 4y ago
  It seems most of the email services that give even basic protection of one's privacy are NOT in the United States. If anyone here is looking for a business idea, I would absolutely sign up for an email service that is based in U.S. and provides a guarantee (in writing) that it 1) doesn't track the user across the web after they sign in to email 2) doesn't scan or parse data from emails in any way 3) doesn't sell any information it obtains from me or about me to any third party 4) doesn't make any of its money at all from advertising 5) maintains high operational security standards. Notice that I'm not even asking for end-to-end encryption like Protonmail provides. I just want something that is in my home country's legal jurisdiction (for business reasons), doesn't track me invasively nor sell my data, and is well-run. I believe a company could make a lot of money if they communicated this offering to the public and maintained a decent brand reputation.
jarek83 4y ago
I had a bad experience with ProtonMail support either. When it works it's great, but they suddenly changed my password somehow, and I lost all of the emails as they get hashed. Then they didn't want to help resolving that. I was hoping this was one-off issue but it seems to me that ProtonMail has problems to validate as trustworthy business.
jacobedawson 4y ago
I had an email account suspended by Protonmail for using single-digit aliases for testing, took me a week to get it back, and that was only after signing up for LinkedIn premium to be able to message a non-robot. It was terrifying enough that it has made me rethink how I manage all of my online accounts. Incidentally, I never had that issue with Gmail in 10+ years. Not a Protonmail fan.
Test0129 4y ago
I am a long time paid user of Protonmail. This isn't the first issue I've seen. It's is really annoying I have to use a bridge at all to be honest. That being said, I've evaluated other providers like Fastmail. While their service is good I am not a fan of reducing my privacy. So people like me are stuck between a rock and a hard place.
- drclau 4y ago
  > It's is really annoying I have to use a bridge at all to be honest. That is literally the selling point of ProtonMail: the email is encrypted in storage on their servers (they don't have access to it), and thus you have to decrypt it locally on your machine, and the Bridge does that for you, because your email client does not know how to handle the encrypted content otherwise.
- tristan957 4y ago
  I would probably use Fastmail if they weren't based in Australia if I am being honest. ProtonMail makes it very hard to communicate with mailing lists. No support for format=flowed or restricting the number of columns from what I can tell. Super annoying.
mikl 4y ago
Yeah, Protonmail Bridge is my main source of buyer’s remorse wrt. Protonmail. I moved my family e-mail set-up to Protonmail, so I can’t just move away without having to migrate everyone else too. So now I’m just stuck with it. Weird sync issues, random CPU spikes, having to use the web-UI for anything important, etc. Not sure why they can’t make it work, but I guess trying to make their custom encrypted mail set-up simply doesn’t translate well to IMAP’s weird idiosyncrasies.
- gobip 4y ago
  You can "easily" switch to fastmail from Protonmail. First set your domain on fastmail with the accounts, once you're done with the new setup, the last step is to import from Protonmail. Using the Proton Mail Exporter app, you can generate a .mbox file, using fastmail importer, you can send the .mbox file. It's been working great, with over 10k emails.
  - mikl 4y ago
    Yeah, doing it for myself is no problem. It’s more that I’d have to do it for my parents and siblings as well simultaneously, since we share a domain name for e-mail. It’s not impossible, it’s just a huge hassle to move everyone over to using new apps and updating settings on their laptops. Not impossible, just impractical.
- teaearlgraycold 4y ago
  I’ve never been one to use email from a non-web application. So when I moved to Proton Mail the bridge setup seemed like a dramatically over complicated alternative to the web UI. The mobile app seems to work fine, too. I’m glad I avoided this whole mess.
charlie0 4y ago
Oh man, I was just about to start looking into this service. Not necessarily for mail, but for WG VPN. This is not a good look for Proton.
reiichiroh 4y ago
Can’t you just run something yourself like www.the helm.com
andybak 4y ago
> I wish that I had discovered these comments before because this issue with bridge cost me a job back in April.
- deleted 4y ago
  [deleted]
jeffbee 4y ago
Company whose flagship product is fear has mediocre software. Shocking.

438 points by julienpalard 4y ago

If anyone is interested in rolling their own, I have used this since early 2012: https://github.com/jakeogh/gpgmda https://github.com/jakeogh/gpgmda

chuckdotis 4y ago

I've been a paid Protonmail user for a while now, but it seems like if you don't use their webmail site or their mobile app, you don't get a very good experience. The Protonmail Bridge with Thunderbird (the only somewhat supported desktop mail client on Linux) has always been buggy at times, such as archiving not working as expected, or creating a new mail subfolder in Thunderbird creates a parent folder with a "/" in front of it in web mail. I understand there's probably some difficulty keeping everything E2E encrypted on the desktop side of things, but Thunderbird feels crippled if you want to use it with Protonmail/Bridge. For example, calendar doesn't work at all. I love what Protonmail has been trying to do and have done, but all I really want is to be able to use a desktop mail client with calendar, and the Protonmail Bridge is not there yet. My subscription is up in January, so I may switch to something like Fastmail for the time being.

alcoholic_byte 4y ago

Well looks like Proton invested too much in advertisment. They also run VPNs and, although they offer setup via confi-files, frustrate their customers by telling them the problem is on their side and demand they install that piece of software of theirs. Switching VPN providers without changing my setup and it was clear as day, the problem does not reside with me but them. Instable connection, bullshit support telling you it is your fault and you do not know what you are doing... Immediately quit their service. i do not know how you would want to pay a service from such a company.

drclau 4y ago

Proton Bridge has a local cache, which can be disabled. I do wonder if doing so would fix this problem.

bartbutler 4y ago

This is Bart, Proton CTO here. For clarity, the issue mentioned here only impacts Proton Mail Bridge, our desktop IMAP/SMTP gateway to Proton Mail encrypted email. The fact that Bridge and its client can become desynchronized sporadically for some users is a high priority issue we have been working on. Bridge is open source, and as a result relies upon open-source components, and the root cause is an architectural issue in a library that Bridge uses to implement IMAP. When there are network issues, this library returns errors to email clients. Unfortunately, there are hundreds of email clients, and some email clients don’t handle errors properly, and this leads to desynchronization. Our error tracking shows this does not happen often (1-2% of Bridge users) and the symptom is usually incorrect display of messages or read/unread status which is fixed with an inbox resynchronization. There are cases where a combination of a desynchronized mailbox and a specific series of user actions can lead to accidental email deletion, but this is far rarer than desynchronization. Our implementation tries as hard as possible to avoid this. If you find you are missing an email, our implementation works around the issue by placing it in a users’ All Mail folder. As Bridge is open source, updates on this issue have always been publicly posted on GitHub. Addressing this issue at the source requires replacing the core IMAP library. Unfortunately, there are no FOSS IMAP libraries that are sufficiently well maintained. Therefore, the solution is to build our own IMAP library called Gluon, which we have been focusing on since this issue was reported to us. You can follow the progress of this open-source project here: https://github.com/ProtonMail/gluon https://github.com/ProtonMail/gluon We are not refusing to fix the problem. The only possible solution is writing a new open-source IMAP library which we can maintain ourselves to ensure this class of errors cannot occur again. We have doubled the size of the team working on this this year so it is a priority for us. We’re confident that this addresses the main sources of desynchronization and will be available in the beta version of Bridge by the end of the year.

twleo 4y ago
> Bridge is open source, and as a result relies upon open-source components I don't get it. Bridge is open source does not imply it should relies upon open-source components. > Addressing this issue at the source requires replacing the core IMAP library. Why building an IMAP library from scratch instead of fixing/forking go-imap? Even a temporary fix to go-imap when you are developing gluon? Another repetitive work which does not guarantee the mentioned issues will be resolved completely.

cycomanic 4y ago

I'm not surprised. In my experience mail synchronisation with IMAP is fraught with edge cases that cause weird issues (I definitely had weird states happening with offlineimap and Co). I really wish JMAP will take off and give us a much better mail protocol.

jbirer 4y ago

The majority of Protonmail accounts are used for dealing drugs on the darknet and similar things, nobody really cares much about bugs.

keneda7 4y ago
I would disagree. Sure protomail may be used by nefarious actors but there are also plenty of security minded people that use it too. A majority of those users are not doing anything nefarious at all. They simply don't want anyone snooping on their emails.

highwaylights 4y ago

They also don’t care about locking you permanently out of your own e-Mail with no warning, for no reason, with no recourse. Honestly - there are far better options out there. They’re not in anyway a responsible enough business to manage an e-mail service. It’s run more like a hobby project than critical infrastructure.

mr_mitm 4y ago
What are those better options that HN likes? I just switched all my accounts to protonmail, but stories like this make me want to reconsider. The fact that they won't allow me to set up a forwarding rule in case I want to switch again doesn't help.
- gobip 4y ago
  HN is hooked on fastmail which is a great provider to be honest. Have a look at mailbox.org which is in business since the 90s too. Avoid the privacy trending providers promising you to encrypt your emails.
  - akvadrako 4y ago
    I second mailbox.org. Didn't want to use fastmail since it's based in Australia instead of the EU.
  - twleo 4y ago
    FastMail takes on PGP is very reasonable. https://fastmail.blog/advanced/why-we-dont-offer-pgp/ https://fastmail.blog/advanced/why-we-dont-offer-pgp/ I don't believe the encryption/key management from a company.
- Toutouxc 4y ago
  First of all, bring your own domain. That way you can just point the same address elsewhere if you need to switch again without having to deal with forwarding. edit: As mentioned by a sibling comment, my email is currently on Fastmail, zero problems.

spindle 4y ago

The comments in the linked thread are shocking. One person says they lost a job because of email lost by ProtonMail.

grammers 4y ago
I like Tutanota better anyway as it has better value and is truly FOSS (app without Google push is a must for me).
- rossmohax 4y ago
  I had to move off tutanota when I discovered they don't offer offline access to email. Protonmail claims to support offline access, but in every rare occasion I needed it, it wasnt working for me.
  - grammers 4y ago
    >I had to move off tutanota when I discovered they don't offer offline access to email. They do have offline support now as far as I know.
deleted 4y ago
[deleted]

jaimehrubiks 4y ago

What is shocking is the lack of communication from their side.

deleted 4y ago
[deleted]

encryptluks2 4y ago

This sort of reaffirms my belief that UIDs are not sufficient for syncing mail. Emails should be hashed and synced by the hash which would solve other issues, like being able to redownload specific messages that may have got corrupted locally.

jrootabega 4y ago
Even so, isn't this a violation of the IMAP standard, which says that UIDs are, by design, not permanent identifiers, but UID + UIDVALIDITY is? (I don't know much about IMAP.)
- encryptluks2 4y ago
  It is definitely a recommendation, but UIDVALIDITY just checks the folder from what I understand. Hashing the entire message would be the best way from my understanding to sync messages.
- cryptonector 4y ago
  No, RFC 3501 says > The unique identifier of a message MUST NOT change during the > session, and SHOULD NOT change between sessions. Any change of > unique identifiers between sessions MUST be detectable using the > UIDVALIDITY mechanism discussed below. Persistent unique identifiers > are required for a client to resynchronize its state from a previous > session with the server (e.g., disconnected or offline access > clients); this is discussed further in [[IMAP-DISC](https://www.rfc-editor.org/rfc/rfc3501#ref-IMAP-DISC https://www.rfc-editor.org/rfc/rfc3501#ref-IMAP-DISC)]. so, "SHOULD NOT", but in practice it's really hard to make {UID, UIDVALIDITY} assignments persistent and unique, so IMAP servers don't, and as you can see, they are allowed to not. I.e., it's perfectly compliant to generate a new UIDVALIDITY for each session and then assign UIDs to emails in folders when you open them
ogogmad 4y ago
Can hashes not collide? Would that not cause problems?

fishclimbingice 4y ago

psychphysic 4y ago

This is such a serious bug in the context of email that the surely must take this out of stable status?

Maxburn 4y ago
They don't have anything to replace it with yet. They appear happy to leave it in place being buggy instead of removing it and really upset a lot of people.
- deleted 4y ago
  [deleted]

kkfx 4y ago

My own mail policy is simple: - a hosted service because host one myself is too much work CAUSED by anti-spam measure by some "self-appointed sheriffs" of the net; - mail fetched from remote via fetchmail, no messages left on the server, filtered on my homeserver via maildrop, indexed via notmuch, muchsync-ed over SSH to desktop(s)/laptop. That's is.

midenginedcoupe 4y ago
I think we have very different understandings of the word "simple".
- kkfx 4y ago
  Simple meaning: I'm not tied to anyone specifically (personal domain name) and I own my data. They are also on someone else iron, but also on mine and I use them locally. Composing a new mail is just hitting a key on my keyboard, searching my messages like GMail is another key for search&narrow results a modifier+the same key for notmuch-emacs UI. All mails can be linked on all my org-mode/org-roam managed docs equally. It's FAR simpler and FAR more powerful than any modern crapware UI, BUT is hard to setup due to the little development compared to the mainstream UI.
uselpa 4y ago
I like that, any pointers for a Linux-based fetchmail/getmail setup?
- kkfx 4y ago
  So far I've not documented much my setup (but feel free to ask specific questions) I found nice to bookmark: - https://www.howtoforge.com/procmail_tips_recipes https://www.howtoforge.com/procmail_tips_recipes - https://dnns.no/switching-from-procmail-to-maildrop.html https://dnns.no/switching-from-procmail-to-maildrop.html Who have a little fetchmail part. I've nerve used getmail, before I've used OfflineIMAP (buggy but support IMAP IDLE) and mbsync. The only issue is fetching from multiple accounts that demand firing up multiple instances, but that's not much of an issue. You just set FETCHMAILHOME before any invocation pointing to the right config dir and set a different --pidfile for concurrent* fetching if you wish so. MailDrop is a (very) little (very) big setup since you need filters for anything if you are not a piler and that take MUCH time. Normally here my suggestion is fetch anything on a zfs volume, clone it, test on the cloned maildir or snapshot and revert after any test until you get nothing in the INBOXes. A slow step at a time you'll add the rest.

sokoloff 4y ago

The first clue might have been the UID for an in-use mailbox with over 50K messages being 51950.

urbandw311er 4y ago
Can you elaborate on your thinking?
- sokoloff 4y ago
  If you’ve been using your mailbox (and deleting mail) for a while, have over 50K mails in it now, and see (what you think is) a UID of 51950 on the most recent email, the chances that it’s “U” are extremely low, meaning there’s a gap in understanding or in implementation.
  - josephg 4y ago
    Every time I see that, I’m floored by it. The fact that message IDs in IMAP change when you delete messages has got to be one of the worst design choices in any in-use protocol. I’m flabbergasted by it. The sooner everyone moves to jmap the better.
    - cryptonector 4y ago
      It's an artifact of IMAP having evolved in the presence of older mailstore technologies like mbox and maildir that couldn't easily accommodate long-term stable message IDs. It's fine though, as long as the MUA developers understand this and don't expect UIDs to be more stable than they actually are.
    - harha_ 4y ago
      IDs change? Wtf indeed...
    - himinlomax 4y ago
      > The fact that message IDs in IMAP change when you delete messages IDs can also change between sessions, and can be different between simultaneous sessions.

pkrumins 4y ago

How does Protonmail compare to Gmail? Has anyone switched to Protonmail from Gmail?

Eumenes 4y ago
I switched a few weeks ago. The process was fine. They have a tool to help you port your mailbox, calendar, contacts. The web client is great. The mobile/android app sucks. The search doesn't work. If you archive an email on web, it wont always apply to the app. The sync between clients is screwy. Gmail is no doubt a better email product but given I paid a year, I'm going to suck it up and deal with it.
cpburns2009 4y ago
I switched from Gmail to Proton Mail earlier this year in an attempt to de-Google. The Proton Mail website and Android app is just about on par with Gmail's. My only complaint is Proton Mail will refuse to load images if something about the host domain isn't configured 100% to spec which is common for non-tech companies such as home utilities. You can only reply from "+tag" addresses, not send outright from them which is a feature of Gmail. Though Proton Mail's email aliases alleviates my need for that.

Manjuuu 4y ago

Since I've used this for years, way before this ticket, the bridge has always been problematic (periodic full mailbox downloads even with the QT version for example), but since the version with the new ui it got even worse, emails coming and going.

shp0ngle 4y ago

Their approach is "we know it's an issue, we are _rewriting everything_ to a new version, in the meantime suck it up lol"

deleted 4y ago
[deleted]

petesergeant 4y ago

> the reason why we're not putting top prio on this at the moment is that we're doing a significant rewrite The amount of bad, long-lived bugs that aren't addressed because "we'll rewrite it any day now!" in many software organizations is very upsetting

deleted 4y ago
[deleted]

that_lurker 4y ago

Could the title be update to contain the word bridge as the issue is in the Protonmail bridge application and not on Protonmail itself. The entire title is clickbaity, but adding the birdge moves it away from being misleading.

ogogmad 4y ago
The problem is they've been aware of this very serious bug for more than a year, and haven't tried informing their users. So "Protonmail" in this context refers to the business, and the issues surrounding their responsibility, competence and ethics.
- NayamAmarshe 4y ago
  The business is just 'Proton' though, ProtonMail is one of their offerings.
  - coldtea 4y ago
    Doesn't matter much, if most refer to them by ProtonMail, by their main product. Same way people would refer to "Facebook" meaning the whole of Meta
- miohtama 4y ago
  If there is a critical issue with an open source software any user can fix it. If no user steps up then it might not be that important issue in the first place.
  - coldtea 4y ago
    Or it's important, but nobody has the skills/time/familiarity/acceptance from upstream maintainers combo. Compared to the FOSS origin myths, many huge projects, with tons of end users, including very foundational ones, like GTK+ and OpenSSL and such, are understuffed (or just 1-2 base maintainers heavily overworked, who do 99% of the work and can't take it anymore), and nobody cares or has the time to dive in and fix anything. Other projects that might have some person interested to bugfix, have maintainers that don't like contributions outside a clique, and ignore bugfixes submitted for years or forever. So, "any user can fix it" is sometimes just in principle, while actual users than can fix and do fix it are thin on the ground, and othertimes it's just an option for external patches, that will not be merged upstream.

deleted 4y ago

[deleted]

stblack 4y ago

To clarify because comments (so far) seem to ignore what Proton Bridge does. Proton Mail is web mail, like Gmail. That part is fine. You use Proton Bridge as a connector to mail client software. The thing that’s perhaps unclear is, Proton Mail is end-to-end encrypted email. You use Proton Bridge to walk your secure email beyond that enclave into whatever YOU are running in your userland scenario. Part of all this is, you’re completely unclear on the concept of secure email the moment you need to use this bridge. Which begs the question, why would you use Proton Mail if you’re gonna negate its unique value proposition? Proton Mail is fine. It’s this misguided extension that’s the problem here. If you’re fine with web mail then this issue doesn’t matter. If you’re not fine with web mail, maybe Proton Mail isn’t really for you.

jrootabega 4y ago
The bridge is just another client in the sense that any ProtonMail client would need to decrypt emails so you can view them. To be honest, their web client is probably less secure and trustworthy than other mail toolchains you could run locally. So if the bridge was reliable and trustworthy (which it may not be, hence this submission), using it is probably the most secure option.
- stblack 4y ago
  “ To be honest, their web client is probably less secure and trustworthy than other mail toolchains you could run locally. ” To be honest, you’re guessing amirite? Be honest. Bizarre statement, it’s like in-browser security doesn’t exist? The password manager browser extension you may use, that’s Swiss cheese right?
  - jrootabega 4y ago
    You're not looking for a discussion, but rather a fight. I hope you find some peace. Understand that not everyone who responds with a counterpoint also downvoted you. But I'll respond once in good faith - a browser, which is designed to load and run obfuscated remote scripts from quasi-trusted sources, and display complex untrusted HTML mail content, and which is subject to XSS vulnerabilities, will always be inherently less secure than, e.g., mutt. It exposes you to potentially malicious second parties (e.g. ProtonMail) and third parties. This is true regardless of any mitigations and security measures that are also built in to the browser. If you have enough distrust in your threat model to use ProtonMail, you also likely acknowledge the browser's weaknesses.

st_goliath 4y ago

For a bit of context/back-story, Richard, who opened this issue, later also wrote a blog post about the whole ordeal: https://blog.sigma-star.at/post/2022/07/protonmail-adventure/ https://blog.sigma-star.at/post/2022/07/protonmail-adventure... In short: The idea was to move from a custom mail server to a paid, hosted solution. ProtonMail was chosen, with the bridge being used to get mails into a local mail client. Issues with the bridge eventually cropped up.

MrDresden 4y ago

I've been a paying Protonmail customer for years and recently started worrying about having put my eggs into the Protonmail basket. /rant Recent outage issues surfaced some major flaws with the mobile clients, on top of shaking my faith in the infrastructure (though no one can easily stand up to nation state actors so I do not blame PM). And yesterday I was shown ads inside the web portal, along with a big call-to-action button that wasn't there before to go buy a new tier. Have I mentioned that I have been a customer already for years? Never used the bridge, but honestly I am not surprised that it may be broken and not receiving the attention it deserves. It feels like Proton (with its vpn, email and the whole 'suite' they are promoting under the brand) is simply another growth company, focused on adding more and more features rather than on good old fashioned stable products.

badpun 4y ago
> Never used the bridge, but honestly I am not surprised that it may be broken and not receiving the attention it deserves. The bridge was broken in the past, but since around maybe 2-3 years it seems to be working fine.
- Natfan 4y ago
  According to the linked GitHub issue, bridge is not fine and is deleting messages.
jrootabega 4y ago
I think we're at a pretty clear turning point in the "scorpion and frog" fable. Continue into the river at your own peril.
Aaronmacaron 4y ago
I also got this ad yesterday when I opened PM. It's the kind of ad you'd expect from a free tier but not as a paying customer. At first it made me wonder if my subscription had expired.
ulimn 4y ago
Do you mean the ad about the Visionary subscription? I'm also a paying customer but I'm OK with these one-time notification kind of ads about the product I'm using. Just don't shove it in my face every time I open it.

Havoc 4y ago

List of providers that don’t have issues is shrinking rapidly

nik282000 4y ago
I just started the switch when I found this thread. Back to megacorp mail I guess?

thih9 4y ago

I didn't know what exactly is proton mail bridge. This is what I've found: > Proton Mail Bridge is a desktop application that runs in the background, encrypting and decrypting messages as they enter and leave your computer. It lets you add your Proton Mail account to your favorite email client via IMAP/SMTP by creating a local email server on your computer. Source: https://proton.me/mail/bridge https://proton.me/mail/bridge

s3p 4y ago
Protonmail doesn't support email clients with POP/IMAP like most hosting companies do. They only let you use their proprietary apps on mobile. Desktop users can log in to the website or use Bridge which is just a hacky way of creating a local Protonmail server that your email client thinks is a hosting provider. I could never get it set up on my machine so I just used the browser implementation. sigh.
- _def 4y ago
  They aren't offering IMAP as an email provider? What's up with that?
  - qu4z-2 4y ago
    I don't know, and it's why I moved off them. Additionally, the Bridge is only available for Windows/Linux/Mac, so if you want to use your own email client on mobile, I guess your only option is to VPN into your home network and expose a bridge instance there or something. No hard feelings, but I can't really recommend them as an email host if what you're looking for is... an email host.
  - bakoo 4y ago
    If they offer IMAP, they would also need to decrypt your data on their side, which I'm happy they go to lenghts to avoid. This is a case of Proton sacrificing convenience for privacy. If the former is more important for you than the latter, there are better alternatives out there.

iicc 4y ago

JMAP is a replacement for IMAP. Unlike IMAP it has immutable IDs[0] but not much support[1]. [0] https://jmap.io/#faq https://jmap.io/#faq [1] https://jmap.io/software.html https://jmap.io/software.html

cryptonector 4y ago
Emails should really be identified by Message-Id (which isn't guaranteed unique, but is very selective) and a hash of the body and a subset of the headers (e.g., excluding Received headers, and maybe using only Message-Id, Date, and From, maybe not even Subject). A good email store is very searchable, and a good MUA searches email, and a good MAP gives the client temporary (ephemeral) handles for "open" emails.
tete 4y ago
I think it's sadly a bit of a chicken and egg problem, unless someone sets out to write support for servers (mostly dovecot I assume) and clients (web and desktop). It would be worthwhile for many reasons not just the immutable IDs. I'd certainly donate to someone showing initiative working on this.

sneak 4y ago

A good workaround for email hosting is to run an IMAP server somewhere you control, and add it to your mail client. The server doesn’t need 24/7 five-nines or anything. It’s not for receiving mail. It could even be on your local laptop if that is the only place you need old mail, though I keep mine on a dedicated hosting machine in a colo so I can use/search it from my iPhones and iPads and other workstations. You use an IMAP compatible email service like Proton or whatever to receive and check mail like normal. A couple times per month, move all the messages from the service to your own IMAP server’s folders, instead of the “archive” command that moves them to a different folder on the same server that received them. This is pretty straightforward in Apple’s Mail.app on macOS, and I imagine similarly so in most GUI IMAP clients. This gives you the best of both worlds: a single set of maildir folders on your own server you can zip or back up with normal tools like rsync or whatever, as well as 24/7 HA reliable provider servers to receive incoming mail at all times in case your long term mail storage machine is temporarily down. You also won’t bump up against provider storage limits. Self-hosting inbound and outbound email is a drag (though I do it for many of my less critical domains), but a 90% availability selfhosted message storage IMAP service is fairly easy to run. This has the added benefit of a provider hack or legal process presumably affecting only a subset of your most recent messages due to those being the only ones stored there. I am a Proton and FastMail user (and use the affected software) but I regularly move all the messages from these providers to my IMAP storage server (in different folders) so if their systems fail the blast radius is not “all of my emails going back to whenever I started using the provider”.

megous 4y ago
> The server doesn’t need 24/7 five-nines or anything. It’s not for receiving mail. You don't need 24/7 server for receiving email. You can have it offline for a day or two a week and you'd only lose maybe some spam. I'd call that involuntary graylisting. :D
- sneak 4y ago
  Many services use email-based login links or other second-factor codes. Email being offline means you can’t log in to or use these services.

tacker2000 4y ago

Yea the bridge is quite a hot mess, really. I use it with Outlook on Mac and there are always syncing issues, passwords missing and i have to re-sync the whole inbox every 2 months or so. I didnt realise some mail got deleted though, i need to investigate that. I am a proton customer since 3 years and they seemed like a good bunch but now with all the stuff they are offering it seems like they have lost their way. There is also no way of integrating the proton calendar into a 3rd party app like Outlook. This feature has been promised forever…

MomoXenosaga 4y ago

Been using Outlook for 15 years (remember Hotmail lol) and never had a problem with them. Paying for email seems so weird.

OneLeggedCat 4y ago
Around 2003 Hotmail deleted half of my emails. I was able to reach an actual Microsoft employee, who apologized a lot (this happened to a lot of users nationally that day), and told me they were gone permanently. They weren't even backing up these emails. Glad that you have had no problem with them. I haven't either since leaving them behind.
ThePowerOfFuet 4y ago
> Paying for email seems so weird. If you are not paying, you are what is being sold.
bkishan 4y ago
Paying for email with money seems so weird. FTFY.

jdthedisciple 4y ago

why would you rely on a 5 digit number for unique identification rather than something like a g/uuid?

jeroenhd 4y ago
IMAP UIDs aren't unique IDs per message, they are an incrementing number assigned to a message that's unique per mailbox ("folder"). Their incrementing nature is part of the standard, a random number would likely break mail clients. They should be stable between sessions but when you move a message back and forth between folders, the UID changes every time. There are events where the UIDs change, for example when a server needs to rebuild its indices after corruption, but those should be extremely rare. Your server should also show this change when asked for UIDVALIDITY. A message is defined by (UID, UIDVALIDITY, folder name). If this tuple changes, the message needs to be refetched. It's not the best mechanism for supporting multiple mail clients at once but it's easy to implement at least.
- cryptonector 4y ago
  BTW, "unique per-mailbox" utterly fails to be sufficient in a post-gmail labels-as-folders world. That's because folders are lame. But doing better than folders really makes you want a relational database for email.

ianhawes 4y ago

Not specific to this bug, but I recently setup a hosted Protonmail account with a custom domain and got myself and my wife on it because we do not trust G suite and don’t want all our eggs in one basket. We both use the native mobile app and web based mail client. In general it’s useable but the search functionality is useless. I’m hoping they’ll improve it.

polaris64 4y ago

I've suffered from exactly the same issues with Protonmail Bridge, and just this last weekend I decided (reluctantly) to move to a more standard mail provider (I chose Mailbox.org). Aside from the UID issue discussed I also had problems with Bridge not supporting my particular use-cases. I created my own fork (see https://github.com/polaris64/proton-bridge https://github.com/polaris64/proton-bridge) to work around some limitations and to add features, but maintaining this was too much work, especially as paying for a mail provider was supposed to reduce maintenance burden. I have had a pull request open since the 23rd of June to merge these to the upstream version, but so far I haven't received any comments from the Proton team. I like ProtonMail, I just wish Bridge was more standards-compliant.

rOOb85 4y ago
+1 for mailbox.org I've been using them since around 2015 and they have been excellent.

himinlomax 4y ago

> Finally I found the proof that UIDs as presented by ProtonMail Bridge are not stable: Yeah well that's IMAP-compliant. IDs can change between sessions, that's always been part of that terrible standard.

begueradj 4y ago

I stopped using it anyway since "ProtonMail logged IP address of French activist after order by Swiss authorities" (Which thing was against the promise they made to users publicly on their website by that time)

deelly 4y ago
So, you don't use email at all now? Is it possible?
- begueradj 4y ago
  With Gmail & Co. I accept that for free. With Protonmail, I have to pay for that (for my privacy to be disclosed), after a certain small space quota That's what I mean
- jrootabega 4y ago
  Once a day you can export your emails to a web server, where you can curl them at your leisure.

madsbuch 4y ago

Proton mail has a great mission and I generally enjoy their solution. But it is one of the worst UXs I have ever paid for. The app rarely works and is slow. Clicking notifications results in an infinite loading screen resulting in you needing to find that email manually. I am sure this is blamed on the encrypted backend, but to me it just seems lazy regarding UX.

deleted 4y ago
[deleted]

codeptualize 4y ago

I switched to Proton a few months ago, I quite like it. The outage a while back and this do worry me a little bit, but for me it's not enough to switch as I don't use the bridge, it has worked really well for me, and don't really like the alternatives for various reasons. I do think it's relatively early stage. Yes, the email product has been around, but the more business orientated suite of products seems very early. The email app misses some functionality, but what's there works and looks great. Calendar is progressing nicely. Drive is kinda useless beyond file sharing atm, it really needs a sync app to be useful. Another qualm I have is that you can't buy extra storage, custom domains, etc. It makes little sense to me, for now it's fine, but at some point it might force me to find a different solution. They certainly have a lot of work to do, and they need to get a grip on issues like this asap, but I'm willing to wait it out for a bit as I do like the direction, I think there is a lot of potential. That said I am not sure I would move the company over to Proton like the issue raised, idk if it's ready for that.

bt4u 4y ago

ThePowerOfFuet 4y ago

>We had to accept that it is not a perfect fit for our use-cases. Rarely have I seen such mastery of the art of understatement. I hope they check out Migadu, which has been excellent for me — and would seem to be a much better fit for them, too.

antpls 4y ago

Some years ago, I evaluated Protonmail as a replacement for my personal gmail account. When came the steps "can I easily move from this service?", I realized you have to _pay_ to export all your emails from the service. They make it super easy for you to open an account and receive emails, and then makes you pay if you want to get a copy of your own data. I contacted the support to tell them it is likely illegal under European Data Privacy laws. They replied I can still export email for free one by one if I wanted to... (which is obviously not a valid answer when you have 5000 emails) Then I looked in Swiss laws for a similar clause, and found that Swiss laws doesn't give users of online services the right to easily and freely get a copy of their data. It was a law proposal at the time of my research. So yeah... Your data is so secure in Switzerland that you don't even own your data !

deleted 4y ago
[deleted]
flupe 4y ago
Nowadays they do provide an app (Import-Export) to export all your mail, even for free tier accounts, so it's quite easy to move away. See: https://proton.me/support/export-emails-import-export-app https://proton.me/support/export-emails-import-export-app
- julienpalard 4y ago
  Which is close-source (or I didn't find it in their github repo).
  - psyfi 4y ago
    Does it - legally - matter?
    - memorable 4y ago
      For those who care about OSS and moving to Protonmail from bigcorps email, this _might_ matter, although I think that for the majority of Protonmail users (which doesn't care much about open source), it doesn't matter.

ta988 4y ago

Yeah I migrated less than a year ago to proton but it is bug over bug (gpg not handled properly), this UID bug, nagging to pay for a larger plan. I'll probably migrate to fastmail (or if you have other recommended alternatives) at the end of this billing cycle.

BirAdam 4y ago

Okay, rather than just complaining, I suppose we should gather alternatives, right? mailbox.org hey fastmail tutanota mailfence disroot posteo barracuda (for businesses) vivaldi mail mailpile countermail hushmail I haven't used any of these, so if anyone has others or has experience with any of these, please share your experience.

ravenstine 4y ago
Someone can come up with a reason to not use any of these. And yeah, this UID situation with Protonmail is not good. As a long-time Protonmail customer, I've been concerned that they seem to have gotten bored with keeping a stable product. Back to the point... I still will be using Protonmail because no product is perfect. For example, Fastmail I believe is in Australia which is one of the last western nations where I would want my data to be stored. I wouldn't use them, but does that mean someone else shouldn't use them? Not really. All of these products have tradeoffs. Since Protonmail's delete function is likely to still work most of the time, I won't yet be abandoning them. Fact is that I find all of the alternatives preferable to relying upon The Google.
kompatible 4y ago
Mailbox.org is a great service, good support for custom domains. Also can use Exchange protocol so push notifications for emails (on iPhones at least) are possible
ginsbergjason 4y ago
Skiff http://skiff.com/ http://skiff.com/
seekingsolution 4y ago
It seems most of the email services that give even basic protection of one's privacy are NOT in the United States. If anyone here is looking for a business idea, I would absolutely sign up for an email service that is based in U.S. and provides a guarantee (in writing) that it 1) doesn't track the user across the web after they sign in to email 2) doesn't scan or parse data from emails in any way 3) doesn't sell any information it obtains from me or about me to any third party 4) doesn't make any of its money at all from advertising 5) maintains high operational security standards. Notice that I'm not even asking for end-to-end encryption like Protonmail provides. I just want something that is in my home country's legal jurisdiction (for business reasons), doesn't track me invasively nor sell my data, and is well-run. I believe a company could make a lot of money if they communicated this offering to the public and maintained a decent brand reputation.

jarek83 4y ago

I had a bad experience with ProtonMail support either. When it works it's great, but they suddenly changed my password somehow, and I lost all of the emails as they get hashed. Then they didn't want to help resolving that. I was hoping this was one-off issue but it seems to me that ProtonMail has problems to validate as trustworthy business.

jacobedawson 4y ago

I had an email account suspended by Protonmail for using single-digit aliases for testing, took me a week to get it back, and that was only after signing up for LinkedIn premium to be able to message a non-robot. It was terrifying enough that it has made me rethink how I manage all of my online accounts. Incidentally, I never had that issue with Gmail in 10+ years. Not a Protonmail fan.

Test0129 4y ago

I am a long time paid user of Protonmail. This isn't the first issue I've seen. It's is really annoying I have to use a bridge at all to be honest. That being said, I've evaluated other providers like Fastmail. While their service is good I am not a fan of reducing my privacy. So people like me are stuck between a rock and a hard place.

drclau 4y ago
> It's is really annoying I have to use a bridge at all to be honest. That is literally the selling point of ProtonMail: the email is encrypted in storage on their servers (they don't have access to it), and thus you have to decrypt it locally on your machine, and the Bridge does that for you, because your email client does not know how to handle the encrypted content otherwise.
tristan957 4y ago
I would probably use Fastmail if they weren't based in Australia if I am being honest. ProtonMail makes it very hard to communicate with mailing lists. No support for format=flowed or restricting the number of columns from what I can tell. Super annoying.

mikl 4y ago

Yeah, Protonmail Bridge is my main source of buyer’s remorse wrt. Protonmail. I moved my family e-mail set-up to Protonmail, so I can’t just move away without having to migrate everyone else too. So now I’m just stuck with it. Weird sync issues, random CPU spikes, having to use the web-UI for anything important, etc. Not sure why they can’t make it work, but I guess trying to make their custom encrypted mail set-up simply doesn’t translate well to IMAP’s weird idiosyncrasies.

gobip 4y ago
You can "easily" switch to fastmail from Protonmail. First set your domain on fastmail with the accounts, once you're done with the new setup, the last step is to import from Protonmail. Using the Proton Mail Exporter app, you can generate a .mbox file, using fastmail importer, you can send the .mbox file. It's been working great, with over 10k emails.
- mikl 4y ago
  Yeah, doing it for myself is no problem. It’s more that I’d have to do it for my parents and siblings as well simultaneously, since we share a domain name for e-mail. It’s not impossible, it’s just a huge hassle to move everyone over to using new apps and updating settings on their laptops. Not impossible, just impractical.
teaearlgraycold 4y ago
I’ve never been one to use email from a non-web application. So when I moved to Proton Mail the bridge setup seemed like a dramatically over complicated alternative to the web UI. The mobile app seems to work fine, too. I’m glad I avoided this whole mess.

charlie0 4y ago

Oh man, I was just about to start looking into this service. Not necessarily for mail, but for WG VPN. This is not a good look for Proton.

reiichiroh 4y ago

Can’t you just run something yourself like www.the helm.com

andybak 4y ago

> I wish that I had discovered these comments before because this issue with bridge cost me a job back in April.

deleted 4y ago
[deleted]

jeffbee 4y ago

Company whose flagship product is fear has mediocre software. Shocking.