A mail provider's own mail app *could* use entirely different network protocols (i.e. not IMAP / SMTP) and entirely different servers.
Its network traffic also *could* be based on HTTP(s) so it's more compatible with that weird proxy. Its push *could* be based on GCM (Google Cloud Messaging) and not maintaining a persistent IMAP connection (Aqua).
You, sir, are an email guru. I have been telling my friends in Philadelphia how good Aqua is and how knowledgeable you are. Plus, generous of your time to spend so much of it on the Forum. You have confirmed my opinions.
I have exercised Aqua's error detection, reporting, and recovery probably more than any of your other users have. Exceptional. I recognized from the start that it was a (super) quality product. Congratulations. I could go on, but I have probably embarrassed you enough already.
Now, back to your post. I think you have hit the nail on the head. I installed a sniffer on my phone yesterday and watched one small outbound email. I couldn't see everything because some of it was encrypted, but there was enough clear text to get an idea of what was going on.
They are sending packets to the following sites:
1. amazonaws.com (yes, you read that right, Amazon Web Services. It's not GCM, but same services.)
2. omtrdc.net (Adobe Marketing Cloud)
3. 192.229.162.144 (MCI/Verizon!)
4. akamaitechnologies.com (Akamai Technologies)
And, all of these packets are directed to port 443 (HTTPS), as you suggested they might. The access to Adobe Marketing Cloud concerns me. I don't remember allowing them to do that when installing Alto.
They are also accessing the following sites within those packets. The text in quotes is from the web site:
1. crashlytics.com (app crash analysis)
2. b.aol.com
3. s.sa.aol.com
4. rpc.mail.aol.com
5. urbanairship.com ("individualized messaging to any marketing channel")
6. fiksu.com ("target and retain high-quality mobile audiences")
7. demdex.net ("store and make sense of behavioral data")
Nowhere in the trace did I see "smtp.aol.com". So, you are right, they are using a completely different mechanism in Alto. So much for trying to configure Aqua to mimic it!