Unfortunately, I am always logged out after a while and have to log back in to the PWA on iOS. In addition, I do not receive notifications about new emails, as was announced at the beginning of the beta.
It at least looks a lot better. I wonder if they fixed imported emails not being e2ee unless they were put in the sent folder. That would be a big win for usability.
Relaunching is a good thing, their new webapp is a lot faster than it was. But as Milus said, it’s buggy. Tried logging in at home, no VPN, and it threw this error (Slightly different error msg on Chromium based browsers but still cannot access login page):
Meanwhile the documenation of Opentalk suggests differently:
In video conferencing, end-to-end encryption means that only the participants in a call can access and decrypt the video and audio content of the meeting. This means that the video and audio content of the meeting is encrypted on the participants’ devices and is not decrypted until it reaches the other participants’ devices. We’re currently developing a solution for that.
Interesting find. Mailbox appears to be reputable so I would very surprised if they are not being accurate with their info. And that’s what makes the contradiction interesting to say the least.
It is hard to tell because they seem to do development in a private GitLab instance with a private GitLab tracker, and the source code on OpenCode is just a mirror, but it seems like code for E2EE signaling was added in May.
OpenTalk is developed by the same company as mailbox, so when they say they’re currently working on a solution maybe they are referring to E2EE code that is being run in production at mailbox, but isn’t fully completed for non-mailbox OpenTalk customer/users.
Hmm that’s interesting. I went a bit further now and looking at other enterprises under this group. Like Download Apps | OpenCloud which actually has their own mobile clients, meanwhile Mailbox recommends the OX Drive app.
I guess they are just still building it all out. But not sure I feel comfortable using this level of experimental software.
OpenTalk is a separate product for doing video conferencing like an added extra. To my knowledge that is not E2EE, so that’s why I’d still use Signal or Matrix for that.
The email/drive encryption is as it always was though and is a part of OX.
As for E2EE in OpenTalk, that is planned with LiveKit, according to the AI results of search engine. It linked to this video where they describe some of their concerns for example the server serving OpenTalk is also serving the E2EE code, and that’s normally a problem because a backdoor simply could be implemented in that. Whereas with something like matrix you can have the web client hosted somewhere else and just point it to your matrix server’s end point.
In any case we recommend Mailbox.org for their email services, not for their delivery of OpenTalk.
