Just FYI I installed the apk from the github repo (not the google play version) via Obtainium a few days ago and it tried to make a connection to 2 cloudflare IPs during setup of my account. Without prior consent or any mention. So just be aware that there is still some form of telemetry or unwanted connections happening, even though they removed the telemetry flowing to Mozilla's own telemetry endpoint. K-9 had zero of this, it just spoke with your mail servers and that was it. So be careful and block outgoing app connections by default. I did not analyze the data being sent, just that there were those 2 unwanted connectiins happening.

[–] jonne@infosec.pub 8 points 16 hours ago (1 children)

Isn't this part of the auto configuration stuff? Basically there's a standard where you can add some DNS records to your domain and/or a standard file on your website so e-mail clients can automatically prepopulate all the email settings so you only need to worry about entering your email and password.

[–] ghen@sh.itjust.works 3 points 8 hours ago

That might be it, Thunderbird works really well with auto configuration of domains that it doesn't know but has DNS entries.

load more comments (1 replies)