5 ms·

I disagree. I think its a good idea to have safe options, and let developers come up with creative ways of building things on top of it.

ocdtrekkie 8y ago
Nothing about AMP for Email is safe. It introduces new ways for senders to revise history after an email has been sent. Sent an ad claiming that you had a given price for a full week, and then decided you didn't want to sell it for that anymore two days later? Handy that you can remove all evidence of your advertisement after you sent it. It also introduces an entirely new playground for phishing scams, which I think you'll see using an abundance of new tricks, after Google has extremely unwisely made users comfortable entering data into emails they receive. The head of the AMP project threatened to "enforce the CoC" on people who brought up these valid concerns.
- bitpush 8y ago
  "Sent an ad claiming that you had a given price for a full week, and then decided you didn't want to sell it for that anymore two days later?" How is that different from - I saw a price for a flight on the website, but now its gone. If it was going to change, why did they show it to me?
  - ceejayoz 8y ago
    There's a reasonable expectation that a website may get updated. The same is not true for mail.
    - cramforce 8y ago
      Emails already support updating by including external image references inside the email. AMP for email makes json requests proxied by the email client. Your client can decide to only make these requests once and then keep them stable or to show you a version history of the state of your email upon every time you opened it.
      - JohnFen 8y ago
        > Emails already support updating by including external image references inside the email. I think this is not comparable. If an email links to an external image, the external image is not the email, it's a link and behaves as everyone expects a link to behave. The email itself is immutable. This may seem to you like hair-splitting, but I don't think it is, since blocking external images is a common thing for people to do anyway. Doing so doesn't make email useless.
  - MatekCopatek 8y ago
    Depending on where you live, you could claim the ad was binding, but now you have no email to refer to. You could probably make a screenshot, but OP has a point
  - danShumway 8y ago
    I realize you're arguing in the opposite direction, but removing mutable web history is one of the biggest justifications behind the push for IPFS and DAT.
- Alex3917 8y ago
  > It introduces new ways for senders to revise history after an email has been sent. Why can't you just set your email client to archive every version of the message that you see? It wouldn't even take up much extra space, since it would just have to store the JSON responses.
  - rrix2 8y ago
    I love to have to build work arounds for user-abusive implementations of non-standards to have basic trust in messages i receive...
  - cramforce 8y ago
    See my other comments on this. This is very much possible by design.
    - Alex3917 8y ago
      Thanks! Will there be a way to authenticate that a JSON response came from a given sender? (E.g. are they required to be signed or whatever?)
      - fstanis 8y ago
        They can only hit a JSON endpoint in the same DNS zone (eTLD+1) as the sender's email, e.g. if the email is from sender@mail.example.com, it can only hit endpoints on example.com and its subdomains.
        MereInterest 8y ago
        So, it breaks the concept of forwarding emails?
        fstanis 8y ago
        From the spec: > The email client strips out the text/x-amp-html part of the MIME tree when a user replies to or forwards an AMP email message. This is why it is important that an email provide alternative content in the HTML part.
- joking 8y ago
  just like every other airline sends you offers of prices from 29$ and there not one available date with that price?
  - anigbrowl 8y ago
    Yeah, that's terrible and people who do that should be cut off rather than given additional options.
- fixermark 8y ago
  Sorry, how does AMP reach into my client machine and delete my screenshots?
  - Twirrim 8y ago
    Yes, because of course you're going to take screenshots of every email you receive as a matter of course.
    - fixermark 8y ago
      If I'm concerned about content being changed in the era of dynamic external-server emails? Sure will.
      - OJFord 8y ago
        What makes you think a vendor will honour your screenshot? (That you can't even prove isn't doctored.)
        fixermark 8y ago
        If we're talking a vendor actually altering their offers, it's in their best interest to do so generally. They don't want a civil lawsuit for false advertising to get to discovery where they'd be compelled to answer questions about their process.
- EGreg 8y ago
  Why not have replace email with a Merkle Tree, and also kill off the DNS federated system that makes you have an arbitrary choice of provider? For that matter, why have human-readable addresses? That only leads to abuse. If you want to share an address you already know, you can copypaste it, use a QR code and so on. If you REALLY want to say it verbally, then simply list it on a search engine of your choice. DNS is a glorified search engine.
- cbhl 8y ago
  I was under the impression that those kinds of tricks already happen with today's technology. Advertisers will put the advertised price in a hotlinked image served from a server, and they will both (1) use the image being fetched as a proxy for the email being downloaded/opened/read, and (2) change the contents of the served image after-the-fact. ("Save this email and open it every day this week for a new deal" and other horrors.) Alphabet's Code of Conduct can be found at https://abc.xyz/investor/other/google-code-of-conduct/ https://abc.xyz/investor/other/google-code-of-conduct/ . I'm pretty sure "all our users" is intended to include advertisers and rightsholders (like music labels, movie companies).
  - ocdtrekkie 8y ago
    The AMP Project actually maintains it's own code of conduct, which is what was being referred to in my comment: https://github.com/ampproject/amphtml/blob/master/CODE_OF_CONDUCT.md https://github.com/ampproject/amphtml/blob/master/CODE_OF_CO... I don't have any inherently issue with CoCs, though I find it irritating when threat of "enforcing the CoC" is used as a method to silence legitimate, reasoned criticisms.
    - Bartweiss 8y ago
      I'm curious what the implied violation was, if only for the benefit of other people thinking about CoCs. The "What We Believe" section certainly has lots of open-ended language; it's quite easy to declare any unwelcome criticism 'unconstructive', or any dissenting views 'tactless'. But the "Don't" section is quite a bit more concrete, and mostly wouldn't apply. Was the implication that "this is a fundamentally bad idea" counts as "derailing" or "unstructured critique"?
      - simpss 8y ago
        here's what he's referencing: https://github.com/ampproject/amphtml/issues/13457 https://github.com/ampproject/amphtml/issues/13457 https://github.com/ampproject/amphtml/issues/13597 https://github.com/ampproject/amphtml/issues/13597 and the resulting(check the timestamps): https://github.com/ampproject/amphtml/issues/13603 https://github.com/ampproject/amphtml/issues/13603
urda 8y ago
Handing over control of your content rendering to Google via AMP is not a safe option.

ocdtrekkie 8y ago

Nothing about AMP for Email is safe. It introduces new ways for senders to revise history after an email has been sent. Sent an ad claiming that you had a given price for a full week, and then decided you didn't want to sell it for that anymore two days later? Handy that you can remove all evidence of your advertisement after you sent it. It also introduces an entirely new playground for phishing scams, which I think you'll see using an abundance of new tricks, after Google has extremely unwisely made users comfortable entering data into emails they receive. The head of the AMP project threatened to "enforce the CoC" on people who brought up these valid concerns.

bitpush 8y ago
"Sent an ad claiming that you had a given price for a full week, and then decided you didn't want to sell it for that anymore two days later?" How is that different from - I saw a price for a flight on the website, but now its gone. If it was going to change, why did they show it to me?
- ceejayoz 8y ago
  There's a reasonable expectation that a website may get updated. The same is not true for mail.
  - cramforce 8y ago
    Emails already support updating by including external image references inside the email. AMP for email makes json requests proxied by the email client. Your client can decide to only make these requests once and then keep them stable or to show you a version history of the state of your email upon every time you opened it.
    - JohnFen 8y ago
      > Emails already support updating by including external image references inside the email. I think this is not comparable. If an email links to an external image, the external image is not the email, it's a link and behaves as everyone expects a link to behave. The email itself is immutable. This may seem to you like hair-splitting, but I don't think it is, since blocking external images is a common thing for people to do anyway. Doing so doesn't make email useless.
- MatekCopatek 8y ago
  Depending on where you live, you could claim the ad was binding, but now you have no email to refer to. You could probably make a screenshot, but OP has a point
- danShumway 8y ago
  I realize you're arguing in the opposite direction, but removing mutable web history is one of the biggest justifications behind the push for IPFS and DAT.
Alex3917 8y ago
> It introduces new ways for senders to revise history after an email has been sent. Why can't you just set your email client to archive every version of the message that you see? It wouldn't even take up much extra space, since it would just have to store the JSON responses.
- rrix2 8y ago
  I love to have to build work arounds for user-abusive implementations of non-standards to have basic trust in messages i receive...
- cramforce 8y ago
  See my other comments on this. This is very much possible by design.
  - Alex3917 8y ago
    Thanks! Will there be a way to authenticate that a JSON response came from a given sender? (E.g. are they required to be signed or whatever?)
    - fstanis 8y ago
      They can only hit a JSON endpoint in the same DNS zone (eTLD+1) as the sender's email, e.g. if the email is from sender@mail.example.com, it can only hit endpoints on example.com and its subdomains.
      - MereInterest 8y ago
        So, it breaks the concept of forwarding emails?
        fstanis 8y ago
        From the spec: > The email client strips out the text/x-amp-html part of the MIME tree when a user replies to or forwards an AMP email message. This is why it is important that an email provide alternative content in the HTML part.
joking 8y ago
just like every other airline sends you offers of prices from 29$ and there not one available date with that price?
- anigbrowl 8y ago
  Yeah, that's terrible and people who do that should be cut off rather than given additional options.
fixermark 8y ago
Sorry, how does AMP reach into my client machine and delete my screenshots?
- Twirrim 8y ago
  Yes, because of course you're going to take screenshots of every email you receive as a matter of course.
  - fixermark 8y ago
    If I'm concerned about content being changed in the era of dynamic external-server emails? Sure will.
    - OJFord 8y ago
      What makes you think a vendor will honour your screenshot? (That you can't even prove isn't doctored.)
      - fixermark 8y ago
        If we're talking a vendor actually altering their offers, it's in their best interest to do so generally. They don't want a civil lawsuit for false advertising to get to discovery where they'd be compelled to answer questions about their process.
EGreg 8y ago
Why not have replace email with a Merkle Tree, and also kill off the DNS federated system that makes you have an arbitrary choice of provider? For that matter, why have human-readable addresses? That only leads to abuse. If you want to share an address you already know, you can copypaste it, use a QR code and so on. If you REALLY want to say it verbally, then simply list it on a search engine of your choice. DNS is a glorified search engine.
cbhl 8y ago
I was under the impression that those kinds of tricks already happen with today's technology. Advertisers will put the advertised price in a hotlinked image served from a server, and they will both (1) use the image being fetched as a proxy for the email being downloaded/opened/read, and (2) change the contents of the served image after-the-fact. ("Save this email and open it every day this week for a new deal" and other horrors.) Alphabet's Code of Conduct can be found at https://abc.xyz/investor/other/google-code-of-conduct/ https://abc.xyz/investor/other/google-code-of-conduct/ . I'm pretty sure "all our users" is intended to include advertisers and rightsholders (like music labels, movie companies).
- ocdtrekkie 8y ago
  The AMP Project actually maintains it's own code of conduct, which is what was being referred to in my comment: https://github.com/ampproject/amphtml/blob/master/CODE_OF_CONDUCT.md https://github.com/ampproject/amphtml/blob/master/CODE_OF_CO... I don't have any inherently issue with CoCs, though I find it irritating when threat of "enforcing the CoC" is used as a method to silence legitimate, reasoned criticisms.
  - Bartweiss 8y ago
    I'm curious what the implied violation was, if only for the benefit of other people thinking about CoCs. The "What We Believe" section certainly has lots of open-ended language; it's quite easy to declare any unwelcome criticism 'unconstructive', or any dissenting views 'tactless'. But the "Don't" section is quite a bit more concrete, and mostly wouldn't apply. Was the implication that "this is a fundamentally bad idea" counts as "derailing" or "unstructured critique"?
    - simpss 8y ago
      here's what he's referencing: https://github.com/ampproject/amphtml/issues/13457 https://github.com/ampproject/amphtml/issues/13457 https://github.com/ampproject/amphtml/issues/13597 https://github.com/ampproject/amphtml/issues/13597 and the resulting(check the timestamps): https://github.com/ampproject/amphtml/issues/13603 https://github.com/ampproject/amphtml/issues/13603

urda 8y ago

Handing over control of your content rendering to Google via AMP is not a safe option.