<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/xhtml; charset=utf-8">
</head>
<body>
<div style="font-family:sans-serif"><div style="white-space:normal">
<p dir="auto">Folks — This thread is now OT even from its original OT topic, and we’ve already discussed the privacy situation with server-assisted email clients to death within living memory. Maybe now would be a good time to take this off list?<br>
-sam</p>
<p dir="auto">On 5 Sep 2020, at 13:20, Antonio Leding wrote:</p>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
<p dir="auto">Apologies if I missed this — and I’m not advocating using Spark (far from it) — but nowhere in any of Readdle’s (maker of Spark) policies nor their blog about privacy did I see where they actually store credentials on their servers. They do say “Spark needs access to usernames & passwords” but I interpret this to mean the app which is the same for all IMAP clients most notably the one I am using right now - Mailmate.</p>
<p dir="auto">If you have a different interpretation or know where I missed it, please share… :=)</p>
<p dir="auto">On 5 Sep 2020, at 8:07, Charlie Garrison wrote:</p>
<blockquote style="border-left:2px solid #777; color:#999; margin:0 0 5px; padding-left:5px; border-left-color:#999">
<p dir="auto">On 6 Sep 2020, at 0:13, Steven M. Bellovin wrote:</p>
<blockquote style="border-left:2px solid #777; color:#BBB; margin:0 0 5px; padding-left:5px; border-left-color:#BBB">
<p dir="auto">If I understand this correctly, Spark's architecture requires them to<br>
have access to your email passwords. To me, that's a complete<br>
non-starter; your email password is the most important one you<br>
have, since it can be used to reset all of your other passwords.</p>
</blockquote>
<p dir="auto">That's an important distinction too. It's the difference between giving someone the keys to your house (Spark) -vs- letting them peer through the front door (Edison).</p>
<p dir="auto">I don't want anyone doing either, but they are still very different risk profiles. It's not ok with me when companies hide either behaviour.</p>
<p dir="auto">-cng</p>
<p dir="auto">-- </p>
<pre style="background-color:#F7F7F7; border-radius:5px 5px 5px 5px; margin-left:15px; margin-right:15px; max-width:90vw; overflow-x:auto; padding:5px" bgcolor="#F7F7F7"><code style="background-color:#F7F7F7; border-radius:3px; margin:0; padding:0" bgcolor="#F7F7F7">Charlie Garrison <charlie@garrison.com.au>
Garrison Computer Services <http://www.garrison.com.au>
PO Box 380
Tumbarumba NSW 2653 Australia
</code></pre>
<hr style="background:#333; background-image:linear-gradient(to right, #ccc, #333, #ccc); border:0; height:1px" height="1">
<p dir="auto">mailmate mailing list<br>
<a href="mailto:mailmate@lists.freron.com" style="color:#999">mailmate@lists.freron.com</a><br>
<a href="https://lists.freron.com/listinfo/mailmate" style="color:#999">https://lists.freron.com/listinfo/mailmate</a></p>
</blockquote>
<hr style="background:#333; background-image:linear-gradient(to right, #ccc, #333, #ccc); border:0; height:1px" height="1">
<p dir="auto">mailmate mailing list<br>
<a href="mailto:mailmate@lists.freron.com" style="color:#777">mailmate@lists.freron.com</a><br>
<a href="https://lists.freron.com/listinfo/mailmate" style="color:#777">https://lists.freron.com/listinfo/mailmate</a></p>
</blockquote>
</div>
</div>
</body>
</html>