6 ms·
Neat. Glad there are still people not treating email as a solved problem. I tossed my address in for an invite.. Meanwhile.. Is there a security whitepaper or w
by famousactress 15y ago
Neat. Glad there are still people not treating email as a solved problem. I tossed my address in for an invite.. Meanwhile.. Is there a security whitepaper or writeup somewhere? Handing over the keys to your email account isn't something I'm eager to do without some confidence in your product :)
[Edit] Also... please paste the "if sender == 'pg@ycombinator.com':" condition that I want to believe is in your codebase.
- ja2ke 15y agoSame. I don't like each and every proposed solution that all the recent email clients have, but I live a life which, like it or not, involves a hell of a lot of email. So against all odds, seeing people trying to seriously tackle email from different angles is exciting.
- famousactress 15y agoI had a long conversation with a friend over lunch once where we both started by imagining a severely improved client, and eventually concluded that once you had traction with that the real benefits would come from a severely improved protocol. A lot of what makes email suck seems pretty baked into it historically.
- cj 15y agoYeah, I agree. We came to a similar conclusion and that's definitely one of our long term goals.
- cj 15y agoSecurity is one of our top concerns, and we're looking into different ways to make it as airtight as possible. We'll have more info on security before we launch. At the moment, we're integrating through GMail through their API, so you can revoke access at any time, and we never see your password.
- tinco 15y agoHey, GMail doesn't have a public API does it? Could you tell us a bit about how you integrate with gmail, I thought they kept it pretty locked down?
- famousactress 15y agoYou mean other than SMTP or POP? Those are both definitely public APIs.
- spindritf 15y agoAnd you can set separate passwords for various applications if you enable two-factor authorization.
- rcthompson 15y agoThose also require your password, as far as I'm aware.
- deleted 15y ago[deleted]
- liuhenry 15y agoBaudehlo is correct. Gmail provides a SASL extension called XOAuth that allows you to authenticate IMAP/SMTP with OAuth tokens.
- rcthompson 15y agoWell, that's cool.
- baudehlo 15y agoYes, you OAuth and then you can use IMAP with XOAUTH login.
- akrymski 15y ago