Is this a joke? Do you release a completely rebuilt app, and UnifiedPushis still gone? Users of degoogled phones will still not have notifications? Will you still only use Google FCM?
Requests to the PM Team (for example, for the implementation of Unified Push) have been ignored for many years.
For some people, using a safe ProtonMail app with a dangerous FCM can be a disaster in some countries (journalists, signals, political opposition, etc.)
In that case, it seems to me that the only threat is the mindless copying of public keys to other servers, as described in the article. But who does so? Do admins not create separate private-public keys for each server?
Thanks Evgeny for your explanation and time (I'm sure we all appreciate it).
But you didn't say directly and specifically - does the app make these connections to Google servers?
Is this a joke? Do you release a completely rebuilt app, and UnifiedPush is still gone? Users of degoogled phones will still not have notifications? Will you still only use Google FCM?
Why Google (FCM) notifications on Android are dangerous:
Everyone knows that the content of the notification is encrypted, BUT THIS IS NOT ENOUGH:
https://www.privacy-handbuch.de/handbuch_73.htm
Requests to the PM Team (for example, for the implementation of Unified Push) have been ignored for many years.
For some people, using a safe ProtonMail app with a dangerous FCM can be a disaster in some countries (journalists, signals, political opposition, etc.)
Please repair it!