K-9 Mail passes security audit, as its ongoing transformation to Thunderbird for Android progresses

The Thunderbird team has released an update on their ongoing transformation of K-9 Mail into Thunderbird for Android, a project announced over a year ago. The team is not only enhancing the user interface and introducing new features, but is also heavily focusing on the security health of the software.

As part of their security focus, the Thunderbird team has partnered with the Open Source Technology Improvement Fund (OSTIF) and 7ASecurity to conduct a comprehensive security audit of K-9 Mail. The results of the audit revealed no high-risk vulnerabilities and a limited number of low-to-medium risk vulnerabilities. The majority of these have been addressed by the K-9 Mail team or are currently being resolved.

OSTIF's conclusion highlighted the strong security foundation that Mozilla has laid for this transformation. Amir Montazery from OSTIF noted that the 7ASecurity team found seven broad areas where K-9 Mail demonstrated secure and healthy practices during the audit. This provides an excellent starting point for the next phase of the project.