5 ms·

We have been working on such project in our own Opa technology for quite some time. Do you think we should work on an open source solution for https://peps.mls

by hbbio 13y ago

We have been working on such project in our own Opa technology for quite some time. Do you think we should work on an open source solution for https://peps.mlstate.com https://peps.mlstate.com ? The project is a very clean webmail server, starting with our clean protocol implementations (SMTP, POP, IMAP) and does not require external projects. Try with hn/hn... Update: Please don't change the password for this hn account. As an admin, I can reset it, but have better things to do today ;)

deleted 13y ago
[deleted]
jawr 13y ago
Very nice interface. Kudos.
- hbbio 13y ago
  Thanks go to @tweetfr
shubb 13y ago
This is pretty cool. Will you do any kind of personal variant for gmail refugees?
- hbbio 13y ago
  Thanks. Yes, we are thinking about the following business model for PEPS, which was built for an important account but of which we own the IP. 1. Open source under the AGPL license, so that anyone can host its own instance easily and hopefully we can build a community around the product. 2. Sell support (together with a non-AGPL license for corporations). OR 1. Open source under the MIT license the current product. 2. Sell a complete packaged solution with add-ons for corporate users. Any feedback between the two?
  - angersock 13y ago
    Voting for 2...AGPL is like biohazard level 4 viral.
    - rufugee 13y ago
      How exactly would it be viral in this case? I ask because it's damned confusing. Since this would be an email server, wouldn't it be a drop-in component in most folks' infrastructure? If I understand it correctly, it would just require me to make the source code of the email server/client itself available to my users...not any of my other unrelated infrastructure apps, correct?
      - angersock 13y ago
        I was under the impression that AGPL requires the open-sourcing of everything that touches user data at any point in the pipeline.
        teddyh 13y ago
        The AGPL is exactly the same as the GPL, except that if there is a button to click to download the source code of the program, you are not allowed to remove that button.
        angersock 13y ago
        From the AGPL FAQ: If the Program as you received it is intended to interact with users through a computer network and if, in the version you received, any user interacting with the Program was given the opportunity to request transmission to that user of the Program's complete source code, you must not remove that facility from your modified version of the Program or work based on the Program, and must offer an equivalent opportunity for all users interacting with your Program through a computer network to request immediate transmission by HTTP of the complete source code of your modified version or other derivative work." That last part--"derivative work"--is somewhat the rub.
rattray 13y ago
I'm getting an SSL error.
- hbbio 13y ago
  Yes, our certificate is self-signed for this demo. "Not to worry."
  - markwakeford 13y ago
    http://www.startssl.com/ http://www.startssl.com/ No excuses its free :)
schrodinger 13y ago
Mobile site needs some work.. But one suggestion is turn off autocomplete and autocapitalize for the username box... Makes logging in on iOS hard.
liuliu 13y ago
have you setup Exchange protocol support (for pushmail on iOS devices)? Gmail disabled Exchange protocol support for newer devices, that would be my main motivation to move away from Gmail.
- hbbio 13y ago
  Turns out we _do have_ an implementation of ActiveSync in Opa! That said, as we need to make a living, and if we go the MIT way (see comments below), there are high chances that the Exchange support will be a paid extension.
jlgaddis 13y ago
> starting with our clean protocol implementations (SMTP, POP, IMAP) and does not require external projects. I'm curious of the reasoning behind your decision to reimplement SMTP instead of just using Postfix, for example. I run mail servers for an ISP (and myself) and take advantage of a lot of the "advanced" functionality that Postfix has acquired in the last 15 years.
- hbbio 13y ago
  The initial goal of the project was to have a total control on the TCB (Trusted Computing Base) of a webmail for high security environments, in order to be able to pass certifications such as Common Criteria (EAL). Our protocol implementations use a specific DSL, that generates Opa code which is strongly statically typed with high-level types such as variants/rows. Although we currently lack many features or optimizations, the approach is clean and much easier to certify.
specto 13y ago
This would simplify my life for sure.

by hbbio 13y ago

deleted 13y ago

[deleted]

jawr 13y ago

Very nice interface. Kudos.

hbbio 13y ago
Thanks go to @tweetfr

shubb 13y ago

This is pretty cool. Will you do any kind of personal variant for gmail refugees?

hbbio 13y ago
Thanks. Yes, we are thinking about the following business model for PEPS, which was built for an important account but of which we own the IP. 1. Open source under the AGPL license, so that anyone can host its own instance easily and hopefully we can build a community around the product. 2. Sell support (together with a non-AGPL license for corporations). OR 1. Open source under the MIT license the current product. 2. Sell a complete packaged solution with add-ons for corporate users. Any feedback between the two?
- angersock 13y ago
  Voting for 2...AGPL is like biohazard level 4 viral.
  - rufugee 13y ago
    How exactly would it be viral in this case? I ask because it's damned confusing. Since this would be an email server, wouldn't it be a drop-in component in most folks' infrastructure? If I understand it correctly, it would just require me to make the source code of the email server/client itself available to my users...not any of my other unrelated infrastructure apps, correct?
    - angersock 13y ago
      I was under the impression that AGPL requires the open-sourcing of everything that touches user data at any point in the pipeline.
      - teddyh 13y ago
        The AGPL is exactly the same as the GPL, except that if there is a button to click to download the source code of the program, you are not allowed to remove that button.
        angersock 13y ago
        From the AGPL FAQ: If the Program as you received it is intended to interact with users through a computer network and if, in the version you received, any user interacting with the Program was given the opportunity to request transmission to that user of the Program's complete source code, you must not remove that facility from your modified version of the Program or work based on the Program, and must offer an equivalent opportunity for all users interacting with your Program through a computer network to request immediate transmission by HTTP of the complete source code of your modified version or other derivative work." That last part--"derivative work"--is somewhat the rub.

rattray 13y ago

I'm getting an SSL error.

hbbio 13y ago
Yes, our certificate is self-signed for this demo. "Not to worry."
- markwakeford 13y ago
  http://www.startssl.com/ http://www.startssl.com/ No excuses its free :)

schrodinger 13y ago

Mobile site needs some work.. But one suggestion is turn off autocomplete and autocapitalize for the username box... Makes logging in on iOS hard.

liuliu 13y ago

have you setup Exchange protocol support (for pushmail on iOS devices)? Gmail disabled Exchange protocol support for newer devices, that would be my main motivation to move away from Gmail.

hbbio 13y ago
Turns out we _do have_ an implementation of ActiveSync in Opa! That said, as we need to make a living, and if we go the MIT way (see comments below), there are high chances that the Exchange support will be a paid extension.

jlgaddis 13y ago

> starting with our clean protocol implementations (SMTP, POP, IMAP) and does not require external projects. I'm curious of the reasoning behind your decision to reimplement SMTP instead of just using Postfix, for example. I run mail servers for an ISP (and myself) and take advantage of a lot of the "advanced" functionality that Postfix has acquired in the last 15 years.

hbbio 13y ago
The initial goal of the project was to have a total control on the TCB (Trusted Computing Base) of a webmail for high security environments, in order to be able to pass certifications such as Common Criteria (EAL). Our protocol implementations use a specific DSL, that generates Opa code which is strongly statically typed with high-level types such as variants/rows. Although we currently lack many features or optimizations, the approach is clean and much easier to certify.

specto 13y ago

This would simplify my life for sure.