Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Frontend for addressees to see via web the messages they've received. #4

Open
tin-cat opened this issue Jan 28, 2015 · 2 comments
Open

Comments

@tin-cat
Copy link
Owner

tin-cat commented Jan 28, 2015

To be able to add a link to each sent email like: "Can't see this message? Click here to see it in your browser"

Should be secure: Generated links to see each email should be secured with a unique, strong hash so only the individual addressee knows it. If not implemented properly, it could easily lead to a serious bug where anyone can see any sent message.

@Organizer21
Copy link

Was just reading a newsletter from Sideshow Collectables and thinking that's something to implement long term "Having Trouble? View web version" which would be exactly this.

@tin-cat
Copy link
Owner Author

tin-cat commented Feb 16, 2017

Thanks, @Organizer21 ! It is! It would be really nice to have this option, and should be easy to implement, since the emails are already being stored on the database. A security mechanism should be implemented to ensure that only the recipient of the message can see the email online. A great way to implement such mechanism would be to generate a long hash unique to each message, and require that hash as a get parameter on the web request to emailqueue. Emailqueue should check that hash against the requested message id before showing the email.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants