261–270 of 294 posts
Yesterday Paul Graham asked for an email diary service ( https://twitter.com/paulg/status/1216714155731890176 ): > Is there an easy way to build, or a startup that offers, something that will email you once a day asking "What's happening?" and then accumulate the replies? I did just that! Let me know what you think.
You built this in a day? That's very impressive.
Earlier quoted context omitted.
Ahhlife seems pretty capable except it doesn’t seem to handle photo attachments or logins only via gmail.
Any google mail works. I'm thinking maybe replacing the whole login system with email-only authentication like DailyDiary uses.
Email only authentication would presumably outlive any provider.
I bought into the MyOpenID SSO excitement once, it worked pretty well until it went away. After that, back to email accounts, identity providers like Google/MS/Twitter don't end to know everytime you're logging into your app.
Earlier quoted context omitted.
Yeah, seems there is enough other services that a RFC (under "Subaddress Extension") has been proposed https://tools.ietf.org/html/rfc5233 Maybe it'll get enough steam. Edit: doesn't mean everyone will use it though! But guess the plus sign in addresses would be more "email" than just email.
It’s nice that they’re trying to standardize it but it’s an impossible standard since you can’t assume that any particular domain adheres to to it so you end up with a whitelist either way.
So as long as you, the user and owner of an address, know that your domain supports/not supports it, you can use it.
I don't understand who would have to add any allow/blocklists?
Earlier quoted context omitted.
> How do you solve the "won't read my emails" problem? Have the user generate a device-local SMIME certificate for , register their certificate's public key with the server, have the server generate a mobileconfig that enforces SMIME when emailing anyone, and then in Mail.app change the From: address to when emailing the diary address. iOS will remember that From change and use SMIME to encrypt all diary messages to…
Hey! S/MIME is broken (see eFAIL) and I don’t believe there exist any mitigation’s to the attacks that have been published. tl;dr: there exist ways to read your emails without knowing the private keys.
Earlier quoted context omitted.
How do your friends read it then?
This has been solved for a very long time already. It's called PGP.
Earlier quoted context omitted.
How do your friends read it then?
This has been solved for a very long time already. It's called PGP.
More seriously, PGP is really hard. I think it has some potential for signing emails from your bank, Amazon, etc. but other than that ... it's just a pain. I'm not a crypto expert but a reasonably skilled IT professional, and even I struggle with it.
Earlier quoted context omitted.
He also wrote > Unfortunately, though, in this one case I can't promise that if you build it, I'll use it. Unless I know you, I can't trust that you won't read my emails. (I trusted the previous startup that did it because we'd funded them.) How do you solve the "won't read my emails" problem ? I've seen the statement in your website: > Your data stored and transferred securely. No one will ever read or process your…
> How do you solve the "won't read my emails" problem ? Nobody but a handful of very vocal HN posters care about this. In the marketplace this isn’t a problem. At the end of the day, you have to trust your data in somebody else’s hands. Unless your print your own circuit boards, make your own CPUs and write your own operating system, you cannot escape trusting a third party.
When my mother worked at the local government she (illegally, and unethically) accessed the file of a friend, and learned that a friend lied about the reason she's in a wheelchair, the real reason being somewhat embarrassing. She told all mutual friends about it too and caused big drama (she's a toxic person). This was over 20 years ago btw, privacy problems aren't new (just the scale of it has changed).
In the Netherlands we have a municipal database with data for all citizens. Civil servants legitimately access it in the course of their duties, but names for famous Dutch people have many more hits than regular ones. I think especially for high-profile(ish) people like Paul, it might be more of a concern than you or me.
I'm not paranoid about it, but I do think there's room for improvement.
Earlier quoted context omitted.
No, not every email server supports it. For example, I know that Office 365 Exchange doesn't support it as I tried it yesterday.
that just means Office 365 has a bug in it, not that using that feature is an "email hack" the plus syntax is part of the email address specification. any server that doesn't support it is by definition buggy because some mail won't work as expected or designed.
Many mail servers have a setting to configure which character to use; some default (or used to default?) to "-" instead of "+".