one-time-mail on HackerShow

Security and privacy

secure email access

SHOW HN2016

A minimal web-based IMAP client for use on untrusted machines

Shown by dividuum on Aug 9, 2016. Click the card to turn it over.

18points

7comments

#1,262of 2,264 in 2016

Top 56%of 2016 by points

How HN took it

QuietFewer than 5 comments about the project

1 positive, 3 neutral or asking, 0 mixed, 0 critical, out of 4 comments about the project.

Execution: 1 for, 0 against

Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.

positive neutral or mixed critical about another commenter or something else the maker

Cool idea
From 1 comment
- Definitely a cool idea. Though I feel like I would want to be able to have more flexible rules than "folder" to decide what the account can access. For example, "all unread…
  cyphar on HN

Access rules limited to folders; wanted more flexible rules
From 1 comment
- Definitely a cool idea. Though I feel like I would want to be able to have more flexible rules than "folder" to decide what the account can access. For example, "all unread…
  cyphar on HN
Keys must be set up beforehand
From 1 comment
- Definitely a cool idea. Though I feel like I would want to be able to have more flexible rules than "folder" to decide what the account can access. For example, "all unread…
  cyphar on HN
Pre-specified one-time tokens can be exhausted
From 1 comment
- https://tools.ietf.org/html/rfc6238 Have you considered something like TOTP paired with Google Authenticator or the like instead of just the Yubikey for one-time passwords? EDIT:…
  Jtsummers on HN

More flexible access rules such as IMAP search
From 1 comment
- Definitely a cool idea. Though I feel like I would want to be able to have more flexible rules than "folder" to decide what the account can access. For example, "all unread…
  cyphar on HN

Why not TOTP with an authenticator app instead of Yubikey
From 1 comment
- https://tools.ietf.org/html/rfc6238 Have you considered something like TOTP paired with Google Authenticator or the like instead of just the Yubikey for one-time passwords? EDIT:…
  Jtsummers on HN