Flatsonar

KyPost

by Busnes Games

Relay-based email client for KDE Plasma and Plasma Mobile

Broad permissions Unverified publisher MIT v0.4.0
Install Source code

Support the creators

Flatsonar is just the shop window. The people below made KyPost.

Buy Me a Coffee

About

KyPost is a relay-only email client for KDE Plasma and Plasma Mobile. It does not speak IMAP or SMTP directly; instead, all mail and contacts sync through a KyPost relay backend, which also brokers device pairing and push notifications over UnifiedPush. The relay a device talks to is whichever one its pairing link points at, so self-hosted instances work the same way as the hosted service. The app provides an inbox and message detail view, server-side folders, an HTML composer for replying, forwarding, and sending new mail with attachments and drafts, and a contacts list with a detail/edit view. Pairing a new device with the relay account is done by pasting or opening a pairing link. PGP public keys can be exchanged with other devices by QR code. For accounts whose private keys live on the client, KyPost reads and sends end-to-end encrypted mail through the user's own gpg-agent, which is the only thing that ever touches the private key; where it cannot, encrypted mail is explained rather than shown blank. Optional security features: a PIN lock with lockout and wipe-on-repeated-failure, encrypting the pairing credential behind that PIN, trust-on-first-use TLS certificate pinning, and a mode that keeps no mail or contacts on disk at all.

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

  • your GPG agent (can sign/decrypt with your keys)
    --socket=gpg-agent
  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • Wayland display
    --socket=wayland
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • network
    --share=network
  • owns its own bus name
    --own-name=com.kysecurity.mail
  • talks to org.unifiedpush.Distributor.*
    --talk-name=org.unifiedpush.Distributor.*
  • GPU acceleration
    --device=dri
  • access to xdg-run/pipewire-0
    --filesystem=xdg-run/pipewire-0
  • access to your download folder
    --filesystem=xdg-download

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • com.kysecurity.mail claims the domain kysecurity.com; only its owner can prove that
    publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.