etsd VS ProtonClient

A pretty same setup with a bunch of differences:

1. I'm using a single postgresql database for all apps (each with a different user) on a different server; each app has a different db user

2. I use a minio instance for file/media uploads/serving

3. I mostly use nginx but i'm transitioning new apps to caddy because of automatic integration with let's encrypt and much smaller config for common purposes

4. I use a fab-classic (fabric 1x) script to deploy new versions: https://github.com/spapas/etsd/blob/master/fabfile.py

5. For backup I do a logical db backup once per day via cron (using a script similar to this https://spapas.github.io/2016/11/02/postgresql-backup/)

6. One memcache instance of all apps

7. Each app gets a redis instance (if redis is needed): https://gist.github.com/akhdaniel/04e4bb2df76ef534b0cb982c1d...

8. Use systemd for app control

Yes, you are right on that. If the server is compromised a malicious user may change the client-side code to add a backdoor and steal your private key when you unlock it. He'll be able to steal only the keys that are unlocked while the backdoor stays undetected (not all the data).

The ideal way to resolve that would be to change the service to an API and offer binaries with a correct signature so the user can check and make sure that they get the correct thing. Actually I tried writing the client binaries using electron (https://github.com/spapas/etsd/tree/master/client) but didn't have the time for that :(

You are rigth though, I've added a Risks section to warn for that thingie https://github.com/spapas/etsd/blob/master/README.md#risks

If you only use Protonmail and don't need to connect any other accounts, ProtonClient and ElectronMail are pretty good. Both basically just the web version of PM but you get desktop notifications (PC with mail content; EM just "You've got mail"

I also made a client.

Very often chromium based browser and apps (like my client) suffer from the very unorthodox way of chromium engine to handle color in linux...

OK... I just read your note on GitHub (https://github.com/Steccas/ProtonClient#security-notice-about-this-client)

If you think you need that or just don't want to deal with the bridge I published it on github anyways.

Anyways I tought that it may be useful for everyone that uses protonmail so I recently published it on GitHub.

That's why I did a client for myself: https://github.com/Steccas/ProtonClient