yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] FingerlessGloves:
Yeah it does go against the idea of the app, so I see why it shouldn't be included.

Keep up the good work :)
[Android Apps and Games] gc01:
It remains widely prevalent in many institutions and govt areas as well. This is in part due its support out of the box on pretty much every client app including outlook and thunderbird among others. Its primary benefit derives from its simplistic key management which makes things "just work" with no interaction required by user. It is also pretty weak and leans on having certs - either self signed with the CA certs distributed by admins (directly or for download via web) or purchased for personal use (inconvenient, weak and requires user interaction typically every year). Free s/mime email certs for personal are pretty much gone - Actalis may still offer a 1 year free one though I haven't checked.

These are mostly addressed by the use of OpenPGP Autocryt. The one issue is that outlook doesn't support it - which is a problem. Even making your own signing keys is straightforward in many apps that provide support - there are add-ons to provide support for outlook but not provided out of the box. We can only hope that mail admins move folks over to pgp before there is a nasty problem. It wont happen quickly.

The future is clearly OpenPGP with Autocrypt - autocrypt being essential for pragmatic use, and avoiding the now all but deprecated and problematic pgp key servers (kind of replaced by WKD sort of).

FairEmail supports autocrypt :)

All IMHO of course ...
[Android Apps and Games] jaholm:
Is there a way to "sign-only by default" like "encrypt by default"?
[Android Apps and Games] BackToAndroid:
Is it possible to show "Last sync" time within the app? there are times I just keep pulling to refresh to get my mails without knowing whether it is refreshing or did it even sync
[Android Apps and Games] fraschi51:
Settings - Accounts are not enough for you?
[Android Apps and Games] M66B:
The last sync time is shown in the navigation/hamburger menu.
[Android Apps and Games] otiel:
Thanks, will do that. :good:
[Android Apps and Games] M66B:
I have just released

beta

version 1.831 1.832 1.833

Changelog/download:

https://github.com/M66B/FairEmail/releases

With the work done for PGP signed-only messages, it was not very hard to add S/MIME signature verification and S/MIME decryption anymore. You'll need to import one or more keys into Android to use this. You can do this via the advanced Android security settings, which you can conveniently access with a button from the privacy settings of FairEmail.

Edit: it appeared that the Android key store cannot store public keys, so for now you'll need to select a public key file stored in PEM format to verify signatures. Selection of key files can be cancelled and the signature will still be verified, but there will be a message telling that the signature was unconfirmed. This is a temporary solution, until a proper key storage has been added (low priority).

Edit: since the certificate chain is verified, it is enough to show the name of the signer to see if the signature was okay. [MENTION=10036357]gc01[/MENTION] is this alright in your opinion?

Please report any problem you discover, so it can be fixed.
[Android Apps and Games] gc01:
Yes, I think that sounds reasonable.

Sorry - I haven't actually tried this yet - so may be dumb question - but Is there any mechanism to show further details on cert that was used to sign?

To clarify for myself - your comment on import keys into Android is presumably only for the user's private key right? For incoming email the public key is in the mail itself for s/mime (similar to autocrypt) so nothing to import.
[Android Apps and Games] fraschi51:
If a new mail is to be sent, 'sign' (instead of 'send') is displayed under the send symbol.
[Android Apps and Games] M66B:
Only private keys need to be imported (into the Android key store).

The signer name will be displayed on verification of the signature.
[Android Apps and Games] M66B:
If you enabled signing, yes.
[Android Apps and Games] fraschi51:
Ah o.k., thanks.
[Android Apps and Games] The_Two:
Hi, I have now tested the new feature for sorting with the date header and it works very well.

I have read the FAQ and I have one question about shortcuts. When I long hold the app icon I get only displayed the compose shortcut. Is it also possible to have a shortcut to a certain account or better to its "Posteingang"?
[Android Apps and Games] M66B:
There can be only a few entries in the launcher shortcut list, which will be used for a general compose action and to send a message to up to three frequently used email addresses.
[Android Apps and Games] M66B:
I have just released

beta

version 1.834

Changelog/download:

https://github.com/M66B/FairEmail/releases

S/MIME didn't appear to work correctly in release builds, which has been fixed in this version.

Please report any problem you discover, so it can be fixed.
[Android Apps and Games] heisert:
Hi would be great if we could jump to the top if we long press on the middle Text like"Conversations/Inbox".

I didnt find a jump to top of a folder in the FAQ maybe i fail to see a existing option?
[Android Apps and Games] M66B:
There is a fast scroll for this.
[Android Apps and Games] M66B:
There were a series of "helpful" Play store reviews, like "Doesn't work" bringing the average rating down.

I guess the only way to deal with this is to take more distance from this project, which I will seriously consider to do if this continues. I know most people here appreciate my work, but most people install FairEmail via the Play store.
[Android Apps and Games] nadir husain:
Again , let the morons be morons. It takes all kinds to make up this world. I know, easier said than done but please ignore them. Your passion and commitment are admirable. Let your abilities continue to show and time will tell android users how good this app is. The native Gmail app is the most popular but also the poorest in terms of functionality yet it has millions and millions of downloads just because most people don't know any better. Give it some time and you will see the results for yourself. This app is already leading the pack in form and function. Keep going, I say and best wishes.
[Android Apps and Games] M66B:
This is indeed easier said than done because "ignore" and "commitment" don't go very well together.
[Android Apps and Games] nadir husain:
Ignore the naysayers, commitment to your passion and ability!
[Android Apps and Games] jaholm:
This works for some signatures and for some not. Don't know why.

I only see "Message signature valid, signed by:" and then C, ST and part of L for 3 seconds.

This would be very helpfull.
[Android Apps and Games] M66B:
I have just released

beta

version 1.835

Changelog/download:

https://github.com/M66B/FairEmail/releases

The version adds S/MIME signing. S/MIME encryption will require to store public keys, so this is more difficult to add and right now I am not really motivated.

Please report any problem you discover, so it can be fixed.
[Android Apps and Games] M66B:
If possible, send me the raw message files for which it doesn't work.

It is on my to do list to show the signature details in a better way. Suggestions are welcome.
[Android Apps and Games] Deaeverbe:
Share email to Slack

Good Morning,

I am getting an unable to send error when sharing an email to slack, the link created includes what seems like extraneous info.

I also tried sharing to signal and it created an unfollowable link.

Thanks so much for this app, first glitch found : )

QUOTE=M66B;77231178]It is time for a new, modern, open source, privacy friendly email client for Android.

I have just released a first alpha version for feedback on the design and features.

Not for production use yet!

Most of the stuff basically works, but be prepared for crashes and error notifications.

Safe email is a working name, but it is for several reasons not a convenient name, so suggestions for a name are welcome.[/QUOTE]
[Android Apps and Games] M66B:
I don't understand what you mean, so can you please describe the problem in more detail?

What error message do you get?

What is extraneous info?

What is an unfollowable link?
[Android Apps and Games] Deaeverbe:
When I share to Slack and the Slack interface shows up, and I click send the error message is "Error sending message. Try again."

I am unable to share what it posted as the link because I am a new user.
[Android Apps and Games] M66B:
Share how to Slack?

How is this related to FairEmail?

Isn't this a Slack problem?
[Android Apps and Games] Deaeverbe:
I am able to share to slack from other apps. I thought that too!
[Android Apps and Games] M66B:
How do you share to Slack?
[Android Apps and Games] Deaeverbe:
At the top of the incoming email there is a menu opt i on to share the email, I wished to share it on a Slack channel (like Discord), the process will not complete. When I tried sharing the link FairMail created, it did not work (it actually shared 2 links, when tried separately, neither worked.)

I will try to share to slack feom another email in FairMail...

---------- Post added at 03:33 PM ---------- Previous post was at 03:29 PM ----------

You share to Slack.

I just attempted to share an email from this thread, result: same error message.
[Android Apps and Games] M66B:
FairEmail uses a standard ACTION_SEND filling in the extras:

EXTRA_EMAIL: from email address

EXTRA_SUBJECT: message subject

EXTRA_TEXT: plain message text

I don't see what could go wrong with this.
[Android Apps and Games] Deaeverbe:
And yet...

We will see if the program will let me ahare the generated string now...

A win for gerrymandering [https://nl.nytimes.com/q/ep76D8EJxO...UhdhbGV4QHdvcmRzd2l0aHdpbmdzLmNvbVgEAAAAAA~~] But the fight goes on. View in browser [https://nl.nytimes.com/f/a/0I68Bz4VzMaLvXKZMcjeSQ
[Android Apps and Games] M66B:
FairEmail shares plain text (not HTML), so this seems a Slack problem to me.
[Android Apps and Games] Deaeverbe:
Well, I showed you what it shared... I will check with Slack, though other apps are sharing just fine.

I guess it is far from a deal breaker as my old mail client, Maildroid also does not share. I was just excited that FairMail offerred the capability. Please remember, the link it is sharing does not work.

I will check with Slack and let you know what I learn.

Thank you for your time.
[Android Apps and Games] gc01:
The signer name being the certificate name (usually user's email for s/mime)? It should definitely not show the name taken from mail header as that could be From: Susan and Signed by Mary.

For comparison I just sent myself a pgp signed email and looked at it with FE. There is a 'signed' icon which, if touched, shows 'Message Signature Valid'.

a) It would be nice if it also shows the UID of the signing key as many people use different keys for different purposes and as above the From and the signer do not have to match

(lets ignore dkim/dmarc )

The UID being "First Last Comment <user@fqdn>"

I assume same would be true for s/mime signature - its important to know the UID or at least the email part of the certificate as well I'd think.

Thunderbird enigmail, for example shows:

Good signature from UID

(click to show) Key ID: 0Xxxxxx / SIgned on Date Time

There is also a details button which shows the certificate info and validity (which could be done using openkeychain).

For s/mime the UID would simply be <user@fqdn> - cert of course has a key id (fingerprint) as well.

b) it also shows 2 attachments (application/pgp signature and text/plain content asc - do these need to be shown? Doesn't really matter just asking.
[Android Apps and Games] mrrocketdog:
"swoosh"
[Android Apps and Games] otiel:
:good:

The more FairEmail will be popular, the more negative reviews you'll get. You better get used to it, or stop reading PlayStore reviews altogether. It is a terrible place to offer support honestly, even if some insist to ask for support in a review. You're already doing a lot by offering to contact you directly by email in the Store description, I would honestly stop checking/reading reviews if I were you (I know, not easy - I'm not saying I would succeed in doing so).

Plus I doubt that most people that leave a review such as "Such trash didnt even work" do care that you answer their review with an offer to help them. Most of those reviewers would probably move to the next app and forget about FairEmail because they're sure about their opinion.

And to be honest, I don't consider PlayStore reviews/stars like something meaningful to an extent. There's lot of **** useless apps, full of trackers, that have 5 stars because not everybody looks for the same thing in some apps.

If that can reassure you, I'm seeing more and more recommendations to use FairEmail in places likes /r/androidapps or /r/privacytoolsIO, and I think it shows that FairEmail is appreciated by a public that is looking for a serious email client with ethics.

---------- Post added at 19:11 ---------- Previous post was at 18:49 ----------

Oh, and about the GitHub tracker - a question that seem to come back often, here's my opinion:

Using a unique forum post on XDA for bug reports, feature requests and support is not practical at all for users:

I'd like to follow some discussions but not all because there are too many that I'm not interested in. Thus I'm torn between being flooded by messages or unsubscribe from the XDA post. If I could subscribe to the GitHub issues I deem relevant to me, that would be better.

We can't search for previous issues, see what's already been discussed, why some feature request has been refused for instance...

We can't vote on feature requests, which could help you prioritize what most users want (if that's your goal).

We can't easily discuss on a subject, especially if the original post dates from several days / weeks, because it is lost in the post history.

It's maybe ok-ish to manage bugs and feature requests in a forum when there are not much users, but the more popular FairEmail will be, the more this post will become a mess.

I get that this limits the number of users who start some discussions to give you more time to develop though.

Did you already consider "hire" some people to moderate issues with rights to close them? I'm sure there's a few of us here who would be keen to help you in managing GitHub issues (provide support to users, close invalid/duplicate issues...) in order to save you some time.
[Android Apps and Games] M66B:
I am not sure what the UID is and where to find it in a X509 certificate:

https://docs.oracle.com/javase/7/docs/api/java/security/cert/X509Certificate.html

Currently, the subject DN is being shown.

The attachments are the signature and the signed content. I am not sure yet if these should be hidden.
[Android Apps and Games] M66B:
[MENTION=10229029]otiel[/MENTION] I am easily reachable by email and via this XDA thread, but GitHub issues is simply too much, also because they are frequently misused.
[Android Apps and Games] otiel:
It's sad that you think that GitHub issues are misused, because they can also help to bring some collaboration and help from users.
[Android Apps and Games] M66B:
XDA can do that too and it is just easier to have everything in one place.
[Android Apps and Games] otiel:
You ask for PRs from time to time. How easy is it for a developer who would like to contribute to find what he could work on? On this thread, not so easy...

On GitHub, I could quickly have a look at all opened issues and choose what to work on or discuss. Here, I'm not going to read 200+ pages to bring back some discussions. I'm not even talking about the search function that's so bad.
[Android Apps and Games] gc01:
I just checked the s/mime requirements[1] to be sure and this is what it seems to say:

(1) "End-entity certificates MAY contain an Internet mail address"

Wow - that's disturbing - though in practice I would imagine they all contain the email address.

(2) "The email address SHOULD be in the subjectAltName extension and SHOULD NOT be in the subject distinguished name"

(3) "Sending agents SHOULD make the address in the From or Sender header..."

"Receiving agents MUST check that the address in the From or Sender header of a mail message matches an Internet mail address in the signer's certificate, if mail addresses are present in the certificate."

I just checked one s/mime cert for contents (issued by Actalis) - and I see that

Subject CN: <myemail>

X509v3 Subject Alternative Name: email: <myemail>

Ignoring the possible missing email for a moment, then it seems that the mail client should get the email address from the X509v3 Subject Alternative Name

and must validate it matches the sender given in the mail headers.

If Subject DN is not empty you should probably show it ahead of subjectAltName which you definitely should show and check against sender email.

Thats my current understanding (which is more than it was last night!)

Do you read rfc 8550 the same way?

[1] https://tools.ietf.org/html/rfc8550 see section (3)
[Android Apps and Games] M66B:
I have been reading the same RFC and noticed the same disturbing remark.

Basically, the certificate info is not really usable, which is why I have chosen to display the info.

I think the best that can be done is to display it a bit nicer.
[Android Apps and Games] gc01:
Yah - I think the important element is email address, so you should definitely pull the sub alt name and display it as well as check it against sender email (if non-empty).

Subject DN may often be empty but can't hurt to pull and also display.

I also suggest you pull X509v3 Authority Key Identifier: which will contain

keyid: <fingerprint>

and have some way (long press or menu item ??) to display that as well.

For pgp i'd pull the gpg UID along with the key id (fingerprint)

---------- Post added at 02:37 PM ---------- Previous post was at 02:31 PM ----------

I also checked Actalis web site - they seem to still offer a free for 1 year personal s/mime cert.
[Android Apps and Games] M66B:
[MENTION=10036357]gc01[/MENTION] Actalis seems to be the only one offering free S/MIME certificates currently, see also here:

https://davidroessli.com/logs/2019/09/free-smime-certificates-in-2019/

After quite some effort, there is now a working S/MIME encryption proof of concept!

It will take some time to make this production ready because FairEmail needs to manage public keys.
[Android Apps and Games] gc01:
Yeh they are the last ones I found as well ... congrats on getting s/mime working ... a good addition to FE for sure.
[Android Apps and Games] M66B:
Somebody contacted me with the problem that FairEmail says that the storage access framework is not present on a OnePlus/OxygenOS when trying to export the settings.

Is there somebody here with a OnePlus willing to check this?
[Android Apps and Games] Elektron60:
My OnePlus 6T with Oxygen OS 9 works fine.
[Android Apps and Games] M66B:
Just to be sure: you can export your settings and select attachments?

Is there maybe a setting for this in Oxygen OS?
[Android Apps and Games] BreckZeBoulay:
Both worked. I have a OnePlus 5 with OOS 9.0.9.

Never allowed or choosen an option for that.
[Android Apps and Games] sleffy:
Disabling account connections temporarily

Can I have an account enabled without FairEmail trying to connect to the server? I want still to be able to read its messages but the server is not available from some networks I use and that generates annoying errors and delays. Nothing in it is selected for automatic sync so why does the app try to connect even when there are no pending operations? Have I set it up wrong?

If I could tell the app not to try connecting for pending operations, that would be a bonus but I can live with out that.

Great app. I hope it is simply that I have it misconfigured.
[Android Apps and Games] M66B:
FairEmail will always try to connect to the email server for enabled accounts if always sync is enabled in the receive settings, so you'll want to disable this.
[Android Apps and Games] sleffy:
I already had the top toggle switched off but I have now tried setting the next drop down to "Every 8 hours" too. I cannot see a "Never" option. No change. Attempting to "synchronise now" or pull down to refresh a folder on another account still shows connection attempts to all accounts in the log and it seems to wait for the connection attempt to timeout before synchronising the requested folder. Is there something else I could have set wrong? Is there any way to make FairEmail log its reason for connecting to that account?
[Android Apps and Games] M66B:
My bad: you should disable receiving with the first switch in the receive settings.

The error should be in the corresponding status bar notification, but you should also be able to find it in the log (via the main navigation/hamburger menu).
[Android Apps and Games] M66B:
I have just released

beta

version 1.836

Changelog/download:

https://github.com/M66B/FairEmail/releases

This version adds S/MIME encryption.

S/MIME sign/encrypt needs your private key for signing and the public key of the recipient for encryption. The private key for signing is securely being stored in the Android key store and can be imported using the advanced Android security settings (there is a shortcut in FairEmail's privacy settings). The public key of the recipient can be stored in FairEmail's database after checking the S/MIME signature of the recipient (the easiest way) or be imported into FairEmail's database on sending the message (the key needs to be stored a PEM file, see the FAQ about how you can extract this file from a S/MIME certificate).

On sending a S/MIME signed/encrypted message, FairEmail will first ask which private key to use to sign the message and after that ask which public key to use to encrypt the message. All public keys will be shown with the most likely one's in bold at the top of the list.

I will later update the FAQ with information about how to use S/MIME.

Please report any problem, so it can be fixed.
[Android Apps and Games] sleffy:
I know the error. The error is correct: "couldn't connect to host ... timeout ...". What I want to know is why it is still trying to connect when it has not been asked to do anything on that server?
[Android Apps and Games] M66B:
The error condition is typically being causing by a firewall dropping connections.

FairEmail always connects to the email servers of enabled accounts. If you don't want this, you'll need to disable the account.

Edit: what you can do too, is disable the warning/error notification channel to get rid of the warnings/error notifications.
[Android Apps and Games] Franz Jakob Tim:
I have an 5t, but lineage installed. I also had this problem, because I had disabled/frozen the build in file manager. Now, with enabled/unfrozen filemanager, it works.
[Android Apps and Games] tbv2005:
Working fine on a op7pro with latest oxygen beta
[Android Apps and Games] sleffy:
It is not exactly due to a firewall but that is not important. That server is not contactable from the internet. Only when at work.

If I disable the account, it vanishes from the list and I cannot see how to read the messages in it.

It seems to me like a minor bug in an otherwise great app to spend resources connecting to servers when there's nothing to do on them, if I may be so bold.
[Android Apps and Games] M66B:
For push messages to work, there needs to be a server connection, which is a good reason to always keep a connection to the server.

There are some situations where this is not desirable, notably when no folders at all are set to synchronize, but this are exceptional cases. Handling this would add quite some complexity, which is why this was not done yet. It is on my very long to do list though, in fact for quite some time already.

Anyway, I will see if I can reduce the number of error notifications as a temporary solution.