<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/xhtml; charset=utf-8">
</head>
<body>
<div style="font-family:sans-serif"><div style="white-space:normal">
<p dir="auto">On 6 Sep 2020, at 3:20, Antonio Leding wrote:</p>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
<p dir="auto">If you have a different interpretation or know where I missed it, please share… :=)</p>
</blockquote>
<p dir="auto">Yes, I have a different interpretation, based on my experience using Spark a few years ago. Their docs don't clarify whether anything has changed; I suspect it hasn't. When I reported the "breach" to them at the time; they clearly stated the passwords were kept on their servers, and the account they were accessing (on my behalf) was a bug and that shouldn't have happened. It would have been impossible to happen had they not "stolen" email creds.</p>
<p dir="auto">Unless they have changed, Spark keeps creds <strong>on their servers</strong> and not just in IMAP client. Reading between the lines of their docs; their servers access your mailboxes directly (not just via iOS app), which is how they know when to send push notifications.</p>
<p dir="auto">-cng</p>
<p dir="auto">-- </p>
<pre style="background-color:#F7F7F7; border-radius:5px 5px 5px 5px; margin-left:15px; margin-right:15px; max-width:90vw; overflow-x:auto; padding:5px" bgcolor="#F7F7F7"><code style="background-color:#F7F7F7; border-radius:3px; margin:0; padding:0" bgcolor="#F7F7F7">Charlie Garrison <charlie@garrison.com.au>
Garrison Computer Services <http://www.garrison.com.au>
PO Box 380
Tumbarumba NSW 2653 Australia
</code></pre>
</div>
</div>
</body>
</html>