Q. How to post a message to a Yahoo! group via email.
Support Forum
The process of collecting emails and turning them into forum posts is easy. That's done and being tested now.
The difficult part is working out the best and most foolproof way to identify the sender of the email to ensure they are allowed to do this and to identify the topic and forum they want to post in. And this is made far more complex if they want to be able to start new topics.
When we resolve those issues and have a secure and workable model then the coding is the easy part.
YELLOW
SWORDFISH
|
I think we need a feature similar to that in Yahoo groups -
A. To send a message to the rest of the group, just address an email to groupname@yahoogroups.com, substituting the actual name of your group for "groupname." Group names are not case sensitive.
Note: You can only post to groups you've joined, and only from email addresses registered with Yahoo! Groups. If you misspell the name of a group, or attempt to send an email from an account other than the one you joined under, your message won’t be delivered. If you receive a failure notice, check your email addresses and try again.
____________________________________________________________________________________________
As for identifying the topic, I think they control that with the subject of the email. Of course, the users can't change the subject or it will create a new forum topic.
I understand it may not be as simple as it sounds and it may be too far off, is it possible to have a quick phone call to brainstorm? Let me know.
Regards, Ashish
will let Andy respond in the AM as he is currently working the plugin...
but interesting idea on posting a new topic within a forum - separate email address...
Visit Cruise Talk Central and Mr Papa's World
Yellow Swordfish said
The process of collecting emails and turning them into forum posts is easy. That's done and being tested now.The difficult part is working out the best and most foolproof way to identify the sender of the email to ensure they are allowed to do this and to identify the topic and forum they want to post in. And this is made far more complex if they want to be able to start new topics.
When we resolve those issues and have a secure and workable model then the coding is the easy part.
Regarding the 'to identify the topic and forum they want to post in', for the sake of discussion, let's consider the case of replying to a new post in a subscribed forum or topic. I think, for my purposes anyway, that it is reasonable to assert that for someone to reply via email, they must be subscribed via email. In other words, they must receive an email from the forum that they may reply to.
The email they receive (on the subscribed topic or forum) would contain, if I were coding it, several sets of (unobtrusive) markers to identify the topic and the intended recipient. That way when the user replies to that email, we hope that at least one set of identifying marks makes it through unscathed (checksummed, of course) and that the surviving markers agree with one another, etc.
As to identifying them, that is trickier since mail From: addresses are so easily spoofed of course. That is why the markers contain information identifying both the recipient and the message. That way if an attacker pretends to be someone else and uses a forum member's email address to attempt to post, it won't work because there would be no markers. Or if there were markers, they wouldn't match the markers the legitimate user would've had in his message.
In other words, a single Post P where User A and User B both subscribed to the forum. User A's email would contain the contents of the Post plus multiple marker sets, all of which identify it as an email about post #P sent to UserA.
User B would receive the same email, except that his markers would be different: Post P + UserB.
So if User B replies to User B's message From: User B's email account, the software knows it came from User B as a legitimate reply from User B. An attacker User X could not post to the forum via User B's email account without also having the actual email that was sent to User B--which would mean that User X has already hacked User B's email account, and is not our problem. 🙂
Sorry if this is too much...just got to thinking through the security aspect and thought I would offer it up.
The markers could be as simple as PostID XOR UserID and then run it through a one-way hash. Because this would generate unique markers for every post, this would be a lot of trouble for someone to game for spam purposes.
Note this doesn't solve how to allow for brand new Topics via email at all, which is a tougher problem, I agree. For my purposes, for some time at least, that is okay. Replying via email is 80% of the value of this feature anyway. New Topics can wait for later.
Thanks!
I think you just about covered the user part pretty well. But sadly, it is the allowance of creating new items that really is the tricky part. We are working through the process here trying to find something both workable and as secure as we can make it.
YELLOW
SWORDFISH
|
Hello friends....
Any luck with figuring out this functionality? Can we expect this in r5.1? Whats the timing for 5.1?
Thanks
Ashish
Its in test now... It is not tied to 5.1 though it will require 5.1... I would expect it will release a short period of time after 5.1... we are focusing on 5.1 testing right now to get it out and set aside full testing of this and couple other plugins until then...
we are tentatively planning 5.1 for end of May...
Visit Cruise Talk Central and Mr Papa's World
Hi guys,
Just wanted to see how this plugin was tracking? I noticed a few new plugins released today and was wondering if this one is on the cards to be released soon as well?
Thanks
As it said in our 5.1 release post we are entering some final testing internally of post by email and then want to try and recruit a few 'beta' testers to also give it a tryout. So we are talking very soon.
YELLOW
SWORDFISH
|
1 Guest(s)