<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/xhtml; charset=utf-8">
</head>
<body>
<div style="font-family:sans-serif"><div style="white-space:normal">
<p dir="auto">Hi MailMate users,</p>
<p dir="auto">the latest test release of MailMate is the first one which has a so-called “hardened runtime”. This allows it to be notarized by Apple resulting in the following to be shown when new users open MailMate for the first time:</p>
<p dir="auto"><img src="cid:F4BB4190-6CF2-45AD-BABA-A4E43183D58C@freron.com" alt="" title="Screenshot 2019-03-25 at 14.04.17.png"></p>
<p dir="auto">(The usual one has a yellow warning triangle.)</p>
<p dir="auto">Apple writes about notarization <a href="https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution" style="color:#3983C4">here</a>, but it's written for developers. Most users just need to know that notarization means that before each release I upload a copy to Apple. They make some automated checks and report back when it has been accepted/rejected.</p>
<p dir="auto">The hardened runtime means that MailMate cannot access resources for which I have not explicitly requested MailMate to be able to access. For example, MailMate can no longer, in any way, access the camera, because I have not requested such access in the so-called list of entitlements. For now, MailMate only requests access to Contacts, Calendar, and AppleScript. The user is still explicitly asked about access and access can be declined by the user (just like before).</p>
<p dir="auto">Most of the above is only relevant on Mojave.</p>
<p dir="auto">Now, MailMate is a complex beast and it's very likely I've made mistakes. I have also not tested that it does not break anything on macOS releases before Mojave (in theory, it shouldn't be a problem...).</p>
<p dir="auto">In case of any issues, the last test release without the hardened runtime can be fetched here: <a href="http://updates.mailmate-app.com/archives/MailMate_r5620.tbz" style="color:#3983C4">http://updates.mailmate-app.com/archives/MailMate_r5620.tbz</a></p>
<p dir="auto">And yes, I will hopefully soon get around to answering mailing list emails :)</p>
<p dir="auto">-- <br>
Benny</p>
<hr style="background:#333; background-image:linear-gradient(to right, #ccc, #333, #ccc); border:0; height:1px" height="1">
<p dir="auto">Technical details:</p>
<p dir="auto">If you want to test this from scratch then you need to explicitly download MailMate here: <a href="http://updates.mailmate-app.com/archives/MailMate_r5622.tbz" style="color:#3983C4">http://updates.mailmate-app.com/archives/MailMate_r5622.tbz</a></p>
<p dir="auto">You also need to reset existing MailMate permissions like this:</p>
<pre style="background-color:#F7F7F7; border-radius:5px 5px 5px 5px; margin-left:15px; margin-right:15px; max-width:90vw; overflow-x:auto; padding:5px" bgcolor="#F7F7F7"><code style="background-color:#F7F7F7; border-radius:3px; margin:0; padding:0" bgcolor="#F7F7F7">tccutil reset All com.freron.MailMate
</code></pre>
<p dir="auto">(This affects what you see in the “Security & Privacy ▸ Privacy” pane of System Preferences.)</p>
</div>
</div>
</body>
</html>