Hacker News Reader

How does the authentication work with email providers? Does the application access email through POP or IMAP? Does it have arbitrary access to my email account?

I fear I'll never benefit from apps like this as my email account is the skeleton key to my online identity. I'm not sure I could trust any other human being with the password.

View on HN

At the moment the private alpha is just Gmail, because gmail provides OAuth Authentication, a much more secure/elegant way than requesting a users IMAP credentials.

Work is being done on supporting other email providers, which will obviously require storing the users credentials in a secure way & there is also a white label/internally hosted version in the works for the enterprise that mmahemoff mentioned..

Security for email is definitely our biggest issue so far, but we want to make sure we have it nailed before we go public...

They will have a good opportunity to provide a self-hosted instance for the enterprise, for this reason.

Reply on news.ycombinator.com