Re: JMAP: Re: http API for IMAP
proxy.jmap.io is very stale code at the moment. I'm hoping to have enough time to hack on it at the IETF hackathon this weekend :) Cheers, Bron. On Fri, Nov 15, 2019, at 00:44, Thomas Güttler via dovecot wrote: > Am 14.11.19 um 14:03 schrieb Benny Pedersen via dovecot: > > Thomas Güttler via dovecot skrev den 2019-11-14 08:55: > > > >> Is there already an open source imap2jmap server? > > > > why do you say imap here ? > > > > https://www.cyrusimap.org/imap/developer/jmap.html > > > > cyrus already have it, we just wait for dovecot :) > > > I used my favorite search engine (ecosia) and found > > https://proxy.jmap.io/ > > This way you can use JMAP even if you imap server does not > support it. > > > Regards, > Thomas Güttler > > > -- > Thomas Guettler http://www.thomas-guettler.de/ > I am looking for feedback: https://github.com/guettli/programming-guidelines > -- Bron Gondwana br...@fastmail.fm
SCRAM-SHA-1-PLUS / SCRAM-SHA-224(-PLUS) / SCRAM-SHA-256(-PLUS), SCRAM-SHA-384(-PLUS) and SCRAM-SHA-512(-PLUS) supports
Dear all, I send you a new email to know what is the progress of SCRAM-SHA-***(-PLUS) supports? Currently there is only SCRAM-SHA-1: https://doc.dovecot.org/configuration_manual/authentication/password_schemes/. - RFC6331: Moving DIGEST-MD5 to Historic: https://tools.ietf.org/html/rfc6331 - RFC5802: Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms: https://tools.ietf.org/html/rfc5802 - RFC7677: SCRAM-SHA-256 and SCRAM-SHA-256-PLUS Simple Authentication and Security Layer (SASL) Mechanisms: https://tools.ietf.org/html/rfc7677 - since 2015-11-02 I have seen several months ago, commits about SCRAM-SHA-256. For your information, Cyrus SASL supports: - SCRAM-SHA-1(-PLUS) - SCRAM-SHA-224(-PLUS) - SCRAM-SHA-256(-PLUS) - SCRAM-SHA-384(-PLUS) - SCRAM-SHA-512(-PLUS) -> https://cyrusimap.org/sasl/sasl/authentication_mechanisms.html You can see more and more informations here: https://github.com/scram-xmpp/info/issues/1 Thanks in advance. Regards, Neustradamus
Re: http API for IMAP
* Thomas Güttler via dovecot: > Most people use http based APIs today. And what makes you think that? Who is "most people", exactly? From my experience over the last 35 years in the business, there is no clear indication that HTTP-based APIs will dominate in the future. SMTP and IMAP have been named dead or dying for so long that I forgot to keep track, but they still work today, although modern designs would look different. > Quoting this answer: https://stackoverflow.com/a/46886237/633961 And how is that related? SmtpJS is just one example of how the goal can be achieved if one is hell-bent on using JavaScript. You can write your own proxy service if you like. Check out RFC 6455 et al. This does not make using HTTP a smart choice in my book. If one wants to use a web browser and/or smartphone as a client to access mail, there are various good solutions available. To name just two examples: RoundcubeMail just released version 1.4 with "responsive" UI, and there is SOGo with its AJAX-based UI. To me, rewriting all the functionality in JavaScript, especially when aiming to avoid the protocol specifically designed to access mail storage backends, is just not an idea worth pursuing. > The above line is from you. Should I repeat it? "Frankly, my dear, I don't give a damn." (R. Butler, 1939) :-) -Ralph
Re: http API for IMAP
On 11/13/2019 11:59 PM, Thomas Güttler via dovecot wrote: Am 13.11.19 um 17:21 schrieb Ralph Seichter via dovecot: * Thomas Güttler via dovecot: AFAIK you can't sent a link/URL to a mail on a shared folder to a friend. Like "Hi bob, she loves me. See this message from here https:/./" Regards, Thomas Güttler Actually - why not? It doesn't seem that difficult (at an abstract level) to implement such with available tools. PHP has built-in support for IMAP - so creating an interface that maps HTTP URI's to IMAP commands doesn't look too bad. I might even suggest leveraging existing platforms like Nextcloud - instead of creating a whole new authentication, authorization, processing, and presentation framework you'd "simply" write a Nextcloud add-on that publishes IMAP folders/messages in whatever manner you prefer. Nextcloud already provides for file-sharing - so I see this as a good fit. Daniel
ACL's with SQL/from mysql table
Howdy, Would someone point me to a good howto on how to implement ACL from an sql table? Thanks in advanced,
Re: IMAP4 extensions for Visual Voicemail (VVM)
Op 15-11-2019 om 16:15 schreef Harald Leithner via dovecot: If you use an Iphone (and your mobile proivder supports it) then you are using it ;-) just my 2 cents https://source.android.com/devices/tech/config/voicemail Android apparently supports it as well. Regards, Stephan. Am 21.10.2019 um 12:26 schrieb Stephan Bosch via dovecot: Op 20-10-2019 om 22:33 schreef Jean-Daniel via dovecot: Le 20 oct. 2019 à 22:24, Mauricio Tavares via dovecot mailto:dovecot@dovecot.org>> a écrit : On Sun, Oct 20, 2019 at 10:43 AM Rajesh Bansal via dovecot mailto:dovecot@dovecot.org>> wrote: Hi Team, I need to develop Visual VoiceMail solution. In this solution I need a IMAP4 server, from which I can get a hit for each mail retrieval. Can anyone help me if dovecot can be used for this purpose. That is rather vague. Do you want to do something like ol' biff or what we used to do with Asterix 10 years ago (get an email with the voicemail as as attachment)? I guess he is talking about that: https://www.gsma.com/newsroom/wp-content/uploads/2012/07/OMTP_VVM_Specification_1_3.pdf I skimmed through this. It adds quite a few strange custom bits to the IMAP protocol. Part of this are a few new commands and METADATA items, which should be quite easy to implement. However, the amendments also include various attachment-based QUOTA limits. Dovecot doesn't support this and adding that is not trivial. Also, this specification is quite old and outdated (it even mentions an MD5 authentication mechanism). Is this even actively used anywhere? Regards, Stephan.
Re: IMAP4 extensions for Visual Voicemail (VVM)
If you use an Iphone (and your mobile proivder supports it) then you are using it ;-) just my 2 cents Am 21.10.2019 um 12:26 schrieb Stephan Bosch via dovecot: > > > Op 20-10-2019 om 22:33 schreef Jean-Daniel via dovecot: >> >> >>> Le 20 oct. 2019 à 22:24, Mauricio Tavares via dovecot >>> mailto:dovecot@dovecot.org>> a écrit : >>> >>> On Sun, Oct 20, 2019 at 10:43 AM Rajesh Bansal via dovecot >>> mailto:dovecot@dovecot.org>> wrote: Hi Team, I need to develop Visual VoiceMail solution. In this solution I need a IMAP4 server, from which I can get a hit for each mail retrieval. Can anyone help me if dovecot can be used for this purpose. >>> That is rather vague. Do you want to do something like ol' biff >>> or what we used to do with Asterix 10 years ago (get an email with the >>> voicemail as as attachment)? >> >> I guess he is talking about that: >> https://www.gsma.com/newsroom/wp-content/uploads/2012/07/OMTP_VVM_Specification_1_3.pdf >> > > I skimmed through this. It adds quite a few strange custom bits to the > IMAP protocol. Part of this are a few new commands and METADATA items, > which should be quite easy to implement. However, the amendments also > include various attachment-based QUOTA limits. Dovecot doesn't support > this and adding that is not trivial. > > Also, this specification is quite old and outdated (it even mentions an > MD5 authentication mechanism). Is this even actively used anywhere? > > Regards, > > Stephan. > -- ITronic Harald Leithner Wiedner Hauptstraße 120/5.1, 1050 Wien, Austria Tel: +43-1-545 0 604 Mobil: +43-699-123 78 4 78 Mail: leith...@itronic.at | itronic.at signature.asc Description: OpenPGP digital signature
Re: http API for IMAP
Hi all! On 15/11/2019 14:06, Thomas Güttler via dovecot wrote: [...] >> Note that smtpjs uses a service located at http://smtpjs. It's not truly a >> Javascript SMTP client. This "utility" means you are uploading your email >> credentials to the server smtpjs.com. Use with extreme caution. You really wanted to write here: You really don't want to use that unless you are http://smtpjs or drive your honey pot with specially created accounts. MfG, Bernd -- "I dislike type abstraction if it has no real reason. And saving on typing is not a good reason - if your typing speed is the main issue when you're coding, you're doing something seriously wrong." - Linus Torvalds pEpkey.asc Description: application/pgp-keys
Re: http API for IMAP
Am 14.11.19 um 19:18 schrieb Ralph Seichter via dovecot: * Thomas Güttler via dovecot: Stateless, http and URLs are the future. A bold claim, and not worth anything without proof, which is impossible to provide because you cannot predict the future. Yes, you are right. I can't predict the future. But I can look at the current state of the art. AFAIK nobody will use CORBA today if he starts from scratch. Most people use http based APIs today. JavaScript running on in browser or mobile phone can't connect to IMAP/SMTP. That's simply not true. There are JavaScript libraries like SmtpJS, a low-level TCP/UDP socket API, and more. Quoting this answer: https://stackoverflow.com/a/46886237/633961 > Note that smtpjs uses a service located at http://smtpjs. It's not truly a Javascript SMTP client. This "utility" means you are uploading your email credentials to the server smtpjs.com. Use with extreme caution. JS running in the browser can't. JS running in Node.js can. Please do your research before stating obvious falsehoods. The above line is from you. Should I repeat it? -- Thomas Guettler http://www.thomas-guettler.de/ I am looking for feedback: https://github.com/guettli/programming-guidelines
