Re:Tutanota: GPLv3-licensed, end-to-end encrypted email
by mike-cardwell on Wednesday December 03, 2014 @07:57AM
(#8693452)
Yeah, they can be fixed. FWIW, I used their feedback form to mention the automatic image loading privacy leak.
Re:Tutanota: GPLv3-licensed, end-to-end encrypted email
by MatthiasPfau on Friday December 05, 2014 @02:49AM
(#8703361)
I am one of the founders. Thanks for your feedback. We will fix this early next year!
Re:Tutanota: GPLv3-licensed, end-to-end encrypted email
by mike-cardwell on Sunday December 07, 2014 @04:09PM
(#8713577)
FWIW, I discovered the image loading problem by using https://emailprivacytester.com/ with a test account. Might be worth testing any such changes that you make there. (I am the author of that website).
- Image loading: I'd assume that this is possible to implement, given the current implementation?
- text/plain & multipart mails: I'd expect the same, really. Doesn't sound too bad to build it.
- same for session storage
I agree with all your points, but these are things that are conceptually quite viable, imo. I'd expect these to be valid issues on Github [1] and reasonably easy fixes, no?
1: https://github.com/tutao/tutanota