desktop-app

> locally encrypted before upload, uploads to tons of different services

https://www.duplicati.com does that for free being open-source thing, all platforms supported.

> Still I normally end up using the web interface for ProtonMail as it fits my workflow better and only need to have one tab open in my browser. They even have a nicer looking beta which also has an in-built dark theme at https://beta.protonmail.com

Btw, you can have both static beta web client and offline access to the email messages using https://github.com/vladimiry/ElectronMail even being on free account as opposed to Bridge thing. The app also supports "persistent sessions" feature, unlimited full-text search (body content also gets scnned) and other fancy stuff.

> You can do this on desktop if you're using Bridge app with, say, Thunderbird. Thunderbird then will do the indexing.

Bridge is for paid users only, and it's not open source thing. https://github.com/vladimiry/ElectronMail enables full-text search support for free accounts if the "local store" enabled, described in https://github.com/vladimiry/ElectronMail/wiki/FAQ.

This case has been handled in ElectronMail. See https://news.ycombinator.com/item?id=22190710 for details.

> If you access ProtonMail via their web app, all that's needed to steal your password and decrypt email at will is a few quick changes to the index.html they serve you. This could be targeted to specific users, and once the password is exfiltrated, the page can be reloaded, leaving no trace of the attack. Anyone with access to ProtonMail's back end code or infrastructure could do this. So at least in the case of their web app, they could absolutely provide LE with whatever they wanted in a way that would be quite difficult for the average user to detect.

There is no such issue if you use https://github.com/vladimiry/ElectronMail desktop app as it comes with static resources built on the CI server from the official source code repositories and embedded in then installation packages, see https://github.com/vladimiry/ElectronMail/issues/79 for details. See here https://github.com/vladimiry/ElectronMail/blob/d974b43908e10... the "ProtonMail Version 4.0-beta Web UI" versions embedded in the most recent v4.2.1 release.

The way of verifying that the installation packages attached to the releases have been assembled from the source code is being provided, see https://github.com/vladimiry/ElectronMail/issues/183.

And finally, the app is fully open-source creature, so anyone could assembly own package.

Not necessarily barebones https://github.com/vladimiry/email-securely-app