2. The proprietary bridge which only supports paid users and communicates with protonmail over a proprietary API. Give me a break.
3. "Open sourcing soon" isn't the same as "open source". Until you fulfill this promise it's not worth anything.
Also, while I have a Protonmail rep on the line, your mail server sends invalid Message-ID headers. I sent an email about this to [email protected], is that box monitored?
2. I don't see the issue with the API. Yes, we developed a separate API, because IMAP is several decades old, ridiculously inefficient, and wasn't designed with encryption in mind. The paid restriction may be lifted once we complete certain infrastructure, one major reason it's there that we were concerned about bandwidth.
3. I agree, and we're pushing as hard as we can for this. The latest mobile releases were the first ones on our latest API, so that will help. That said, the web client IS open source and anyone can use that locally and see exactly how the client-server interaction is handled in our API.
Yes, it's monitored. I was notified of this problem today and will look into it.
2. Your criticism of IMAP is awfully convenient when it allows you to design a platform which has vendor lock-in. IMAP might not be designed for encryption but people have been using it for PGP since the start and it's worked fine. Every other email provider does fine with the bandwidth. You're a terrible email provider if your bandwidth constraints don't even allow for IMAP. Having an API is fine, but it's no replacement for open and standard protocols.
3. Excellent. You'll still hear me criticize Protonmail for this until the promise is fulfilled, though. You don't need the software to be perfect to make it open source, you know.
>Yes, it's monitored. I was notified of this problem today and will look into it.
Thanks!
3. True, but part of open-sourcing is people building stuff to interface with the API and I don't want people building stuff on obsolete interfaces which might further delay dropping support for them.
3. People can reverse engineer it today and do the same thing. People have done this. You should just open it up already.
2. We support IMAP/SMTP via the bridge (protonmail.com/bridge).
3. You can run the web client lcoally if ProtonMail itself is part of your threat model (github.com/ProtonMail/WebClient) and the rest of the clients (mobile and bridge) are working on open sourcing soon (mostly library/API version updates and documentation).