#151 closed enhancement (wontfix)

maildir inlet

Reported by: warner Owned by:
Priority: minor Milestone: undecided
Component: code-frontend Version: 0.5.1
Keywords: email frontend Cc:
Launchpad Bug:


Peter mentioned yesterday that one of google's offerings lets you upload files by emailing them (as attachments) to some special email address.

I'm thinking this would be cool to have in Tahoe. The way I'd do this is to say that if the node notices a maildir-shaped directory named 'inlet' in its basedir (meaning that it sees three directories: inlet/{new,cur,tmp}), it will poll or use inotify or something to watch for new messages in new/ . When one appears, it will pull a command out of the Subject: line. A subject of 'add DIRURI' would cause it to locate all of the attached files, upload them to the mesh, then add their filenames to the designated directory.

For our testnet, the inlet address could be something like 'testnet@…'. or 'testnet-inlet@…'.

Doing it this way exposes the DIRURI to anyone who can intercept the mail, of course. Putting the authority in the subject line (as opposed to the destination address, like 'testnet-add-DIRURI@…') reduces the exposure somewhat, since destination addresses are usually logged by all intermediate MTAs, while subjects (and bodies) are usually not.

I'm thinking that the node should never ever send email, so the user who sends this email will not get email-based notification of success. Instead they should poll the directory to watch for their files to appear.

Change History (6)

comment:1 Changed at 2008-06-01T20:58:32Z by warner

  • Milestone changed from eventually to undecided

comment:2 Changed at 2010-02-11T01:00:48Z by davidsarah

If the mail need not be encrypted, then this seems less secure than existing frontends. If it does need to be encrypted, then it seems like a lot of work for little or no gain in usability compared to other frontends. Suggest wontfix.

comment:3 Changed at 2010-02-11T18:09:53Z by warner

It would certainly be less secure. The original idea was to make it easy for e.g. allmydata customers to add files to their directories, similar to what some other services do (dropio? box.net? I forget). I'd leave it on the back burner, and see if we get some users searching/asking for it.

comment:4 Changed at 2011-05-21T15:16:28Z by davidsarah

I don't think we should add frontends that are significantly less secure than the existing ones. E-mail is mostly unencrypted and sent over untrusted channels, so it doesn't fit Tahoe's security requirements for a frontend protocol.

comment:5 Changed at 2011-05-21T16:09:46Z by zooko

  • Resolution set to wontfix
  • Status changed from new to closed

Let's close this as wontfix. We can always re-open it if someone comes up with a compelling use case or a huge BitCoin bounty or something. :-)

comment:6 Changed at 2011-05-21T16:12:53Z by davidsarah

  • Keywords email frontend added
Note: See TracTickets for help on using tickets.