Hacker News Reader

Comment by achempion | Hacker News Reader

This is actually a very tricky problem. We solve this by never rendering mails in trusted origin. It's basically sanitisation + isolated sandboxed iframe for defence in depth + standard security stuff like CSP headers. When I was looking into this, I was surprised how many popular mail clients relay primarily on sanitization and render mails within trusted origin (ex: marco, superhuman).

Other interesting problem to solve for mail clients is the editor. You should be able to forward/edit untrusted html content. Source: I develop tecotype.com for mac/linux/windows.

View on HN

Was looking for exactly this type of email app last week and nothing had the mix of features tecotype has and definitely not as polished. Yes, I know i could cobble all this together but you've basically answered my prayers. Eagerly awaiting the linux release!

Thank you very much for the warm words. Mail clients are surprisingly tricky problem and it took way more effort than I initially anticipated :)

For example, I'm using catch-all address with fastmail. I wasn't able to find any client with the right design that would allow me to define sender address and email account separately during composing, so I can use "alias@test.com via me@example.com" as a sender.

You can send "ping me when linux available" and I'll follow up.

I use a similar catch-all scheme and would love to define the sender and email account separately. So many companies see that my account email is: company@mydomain.com and require support requests to come from that address. So then ive got to then turn that alias into a mailbox - its quite frustrating.

If I can be a beggar and a chooser: The vim keystrokes to go to the top or bottom of the current email list and/or the conversation thread items are sorely missed.

I gave 2 minutes to trying to find a linux download and didn't succeed. Not feeling too smart!

Sorry, it isn't publicly released yet for lin/win. I'm planning to ship via Flatpak as it supports sandboxed installs and explicit permission declarations. Do you think it's the right choice?

I can't say if the choice is right or wrong really, these are not easy choices. I use Arch Linux and generally install custom things from source, but I'm not necessarily your ideal market!

I think Flatpak is a good choice for most users. The main issue is that Ubuntu is perhaps still the largest Linux distro and doesn’t come with Flatpak installed by default.

One good alternative is AppImage. Works on every distro out of the box, but doesn’t have the permission system of Flatpak.

They have something on github, under releases.

From the website I only see download for mac. Where are those linux/windows builds? I'm interested in testing. Could not find any repository or something resembling a more technical page.

Sorry, it isn't publicly released yet for linux/win. I'm planning on releasing it via Flatpak soon. On the technical side, you can reach out to me via email or ask here. Happy to answer any of your questions. This is a paid, closed source product.

Reply on news.ycombinator.com