Mail application 'K-9 Mail' scheduled to be rebranded to 'Android version Thunderbird' completes security audit

Mozilla is working on development to rebrand the Android mail application 'K-9 Mail' to 'Android version Thunderbird'. A new security audit was completed to strengthen the security of K-9 Mail.

K-9 Mail Collaborates With OSTIF, 7ASecurity On Security Audit
https://blog.thunderbird.net/2023/07/k-9-mail-collaborates-with-ostif-and-7asecurity-security-audit/

OSTIF's Security Audit of K-9 Mail is Complete! – OSTIF.org
https://ostif.org/k-9-mail-audit/

7ASecurity Completes Mozilla K-9 Mail Audit - 7ASecurity Blog
https://7asecurity.com/blog/2023/07/mozilla-k-9-mail-audit/

Thunderbird is an email software developed by Mozilla, known for its web browser 'Firefox', and is compatible with Windows, macOS, and Linux. In June 2022, the development of the Android version of Thunderbird was announced, and at the same time, it was announced that the Android version of Thunderbird would not be developed from scratch, but would be developed by rebranding K-9 Mail, which has a proven track record as an email application for Android.

The Android version of the long-established mail client 'Thunderbird' integrates 'K-9 Mail' and appears soon - GIGAZINE

Mozilla is developing in cooperation with the development team of K-9 Mail, and in November 2022, a new function such as `` making it possible to customize the behavior when swiping emails in the inbox '' is added. New features are being actively added.

Custom swipe function added to 'K-9 Mail' version 6.400 integrated into mail software 'Thunderbird' Android version - GIGAZINE

According to the development team, it is important not only to add new functions but also to ensure security in order to build the foundation of Thunderbird for Android. Therefore, the development team conducted a security audit of K-9 Mail in cooperation with the non-profit organization `` Open Source Technology Improvement Fund (OSTIF) '' and the security company `` 7A Security '' aimed at ensuring the security of open source software.

A security audit was conducted by six auditors. As a result, although no high-risk vulnerabilities were found, 7 medium-risk vulnerabilities, 3 low-risk vulnerabilities, and 9 recommendations for strengthening security were found. The development team is already working to fix the issues, with 9 fixed and 2 partially resolved out of a total of 19 issues.

In addition, the security audit team said, ``By following the recommendations in the report, K-9 Mail can start as Thunderbird for Android.K-9 Mail has safe and sound points, and a new chapter.

The full PDF of the security audit report written by the audit team can be found at the link below.

K9M-01 - K-9 Mail Mobile Audit - FINALr2 - K9M-01-K-9-Mail-Mobile-Audit.pdf
(PDF file) https://blog.thunderbird.net/files/2023/07/K9M-01-K-9-Mail-Mobile-Audit.pdf

In addition, the Thunderbird development team has announced the 'iOS Thunderbird icon' along with the new logo announcement in May 2023, revealing that they are working on the development of the iOS version of Thunderbird.

Thunderbird's new logo will be announced, and the development of iOS version applications will also be announced - GIGAZINE