tutao / tutanota

Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
https://tuta.com
GNU General Public License v3.0
6.12k stars 528 forks source link

Javascrip JIT #8012

Closed PrivacyAndSecurity closed 4 days ago

PrivacyAndSecurity commented 5 days ago

Bug in mobile app

Describe the bug A clear and concise description of what the bug is.

When I want to login in Tutanota or Ente Photos, I can't, because in my Browser Javascript JIT is disabled by default and the Problem is, that I always need to enable it, that I can login. And that bothers me a bit.

To Reproduce Steps to reproduce the behavior:

  1. Go to Tutanota Login
  2. Click on Login after filling out everything.
  3. And then it freezes with this sentences like if it would open.
  4. I need to enable it, that it works.

Expected behavior A clear and concise description of what you expected to happen.

That you fix it or change it somehow.

Screenshots If applicable, add screenshots to help explain your problem.

Smartphone (please complete the following information):

Additional context

charlag commented 4 days ago

Hi. This might be expected, especially on mobile device. The app has to do Argon2 key derivation and it is a very slow operation without WASM or JIT. On Android you are better served by the mobile app.

PrivacyAndSecurity commented 4 days ago

Hi. This might be expected, especially on mobile device. The app has to do Argon2 key derivation and it is a very slow operation without WASM or JIT. On Android you are better served by the mobile app.

Is there not a solution for this on your side to change it, that it works without Javascript JIT? I understand that, but I don't want to give Permissions to an App, when I can use Online without Permissions too. And from a Security Perspective, I don't want to have Mail on my Phone.