I recently noticed that, as is documented in the wiki "https://github.com/k9mail/k-9/wiki/Intents";, I can program an app that can read lots of information about received emails. Just with a broadcast receiver for intent "com.fsck.k9.intent.action.EMAIL_RECEIVED" and with no extra permissions or K9 configuration changes, I seem to be able to intercept new mails from my testing app.
I also noticed that there exists customized permissions like " com.fsck.k9.permission.READ_MESSAGES" but I seem to be able to read emails even without this. I also noticed that third-party apps like EmailPopup can read emails wothout the this pemission as can be seen in its *AndroidManifest.xml (*https://github.com/baolongnt/EmailPopup/blob/master/AndroidManifest.xml) where this permission is commented but seems to require com.fsck.k9.permission.DELETE_MESSAGES to perform other tasks. ... <uses-permission android:name="android.permission.INTERNET"/> <!-- For testing only <uses-permission android:name="com.fsck.k9.permission.READ_MESSAGES"/> --> <uses-permission android:name="com.fsck.k9.permission.DELETE_MESSAGES"/> ... In the wiki it is also suggested that emails content can be read, attachments can be downloaded and new mails can be composed in your name using intents. I am worried about any installed application bean able to sniff, unnoticed, all my emails by default. If this is the default behavior, can it be prevented? I even wouldn't mind to loose all third-party apps integration by configuration. Also some clarification would be great in the Wiki documentation to explain the usage of customized com.fsck.k9.permission.* permissions. Thanks to developers for this great app, best regards. -- -- You received this message because you are subscribed to the K-9 Mail Users List. To post to this group, send email to [email protected] To unsubscribe, email [email protected] To report an issue with K-9 Mail, visit http://code.google.com/p/k9mail/issues/list For more options, visit this group at http://groups.google.com/group/k-9-mail --- You received this message because you are subscribed to the Google Groups "K-9 Mail" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
