Is the Android Protonmail app on F-Droid safe?

3 years ago by comcreator to c/protonmail

Is the Android Protonmail app on F-Droid safe? Protonmail is not available on F-Droid and I would like to get it on F-Droid to receive automated updates.

LinkOpensChest_wav 5 points 3 years ago

I agree with you. It's so weird that they host their VPN app on F-Droid but not their email app. It seems like it wouldn't take too much effort on their part to add Proton Mail to F-Droid.

save

path: 0 2047007, hotness: undefined, score: 5, children: 6

biscuits 3 points 3 years ago

I remember reading a discussion somowhere and it seems they won't add ProtonMail app to the F-Droid as it relies on Google Play services for push notifications.

save

path: 0 2047007 2050180, hotness: undefined, score: 3, children: 5

LinkOpensChest_wav 3 points 3 years ago

If that's the case, it makes me wonder why they designed it this way. Their main selling point is privacy, yet they are so closely aligned with Google's services? Seems very questionable, especially since other email clients such as K-9 provide notifications just fine on Android.

This is the sort of thing that gives me second thoughts as a paid subscriber about using Proton's services at all.

save

path: 0 2047007 2050180 2060093, hotness: undefined, score: 3, children: 4

biscuits 3 points 3 years ago

Honestly I don't know, but this is the reason that I passed on the Proton when I wanted go for paid tier and I decided to go with Tutanota instead, as they have all components of their apps open source, as far as I am aware.

There's the one con that they don't allow to use any 3rd party email apps, but from what I have heard, ProtonMail Bridge is also not that great of a solution.

save

path: 0 2047007 2050180 2060093 2137591, hotness: undefined, score: 3, children: 0

fredboy 2 points 3 years ago

On android there is a tradeoff, either you use googles notification services, or running your own, which will cause battery to die faster. They decided it'n not worth it, and they also don't want to release it without notifications at all, as it seems.

save

path: 0 2047007 2050180 2060093 2205650, hotness: undefined, score: 2, children: 2

LinkOpensChest_wav 1 point 3 years ago

Weird since they apparently thought it was worth it for their VPN app, but not their email client.

save

path: 0 2047007 2050180 2060093 2205650 2205750, hotness: undefined, score: 1, children: 1

biscuits 4 points 3 years ago

I overall trust APKs from IzzySoft as those are just fetched official releases compiled by app developers themselves. You can verify that yourself by downloading older version APK from ProtonMail GitHub repo then updating the app through F-Droid. If it updates then it means that the APK from GitHub and APK from F-Droid are signed with the same key.

Another way would be to use something like Obtainium to track new releases on the official ProtonMail repo.

save

path: 0 2050279, hotness: undefined, score: 4, children: 0

Clav64 1 point 3 years ago

If in doubt, hit up their GitHub

https://github.com/ProtonMail/proton-mail-android

And use Obtainium to get updates.

save

path: 0 3047840, hotness: undefined, score: 1, children: 0