1,070 karma · joined July 25, 2018
Architect of TMTP protocol, to let Internet sites message their members/customers directly (instead of email).
mnmnotmail.org || https://twitter.com/mnmnotmail
.
> You can't use a volatile cache ...
> all this work to juggle JSON in flat files
I really don't think I've misused the cache! I didn't use SQLite because ordinary admins need to be able to inspect and occasionally fix the database. That decision can be revisited down the line. > Companies don't want to host heir own email servers
TMTP is more like HTTP than SMTP. There must be many ways to host a service, just like a website. Any admin must be able to bring up a TMTP server. (It's nothing like getting a new MTA host to work with the SMTP network!)I discuss the E2EE issue on the mnm website FAQ. Only certain kinds of TMTP sites will want it to be the default. If a consumer tech brand offers an online TMTP client, it would present a proprietary API to the browser, as Gmail does; TMTP can't protect those messages.
> synchronization between multiple client devices?
> permissions in groups?
> identity verifications?
> mobile clients which don't want to open dozens persistent connections?
> the demo doesn't actually use the protocol?
Client sync is implemented already \o/ - that's the replicas feature.
It already has simple, user-defined groups. Admin-defined groups is on the roadmap; need user input to chart a course here.
I've implemented OpenID Connect auth for new account registration. It could also be required per login, if there's demand.
JMAP offers a model for how to do non-persistent connections on mobile devices.
The demo is just the browser-based UI to the client, reconfigured to use canned data. (The client is a localhost web app.)And, hey, can't a protocol can be a work in progress? I'm only willing to spec what I am ready to implement!
This is a deep topic, and "messaging" is not the only goal, nor even the principal one :)
Conversely, TMTP groups/lists could be copied to a read-only website.
Trying to "upgrade" the email ecosystem is an impossible goal, and the requirements I'm working to can't be shoehorned into the email model.
Yes, the default concept for an Internet messaging service is "everyone can reach anyone". This isn't helpful for online services and businesses who need to reach their members/customers directly & securely, and with a rich content model (e.g. survey/form in message, and structured result in reply).
The protocol specifics (e.g. identifiers & types) aren't polished, because I focused on features in working code. Thanks for the feedback!
You can't have alias collisions; it checks whether the string you propose is acceptable & available :)
A sender's alias is (or will be) checked against their recorded aliases.
The reason why lack of E2EE in email is a serious problem is that email traverses at least two "federated" services, which are typically third parties with whom you have no intrinsic need for a relationship. A TMTP message passes through a single service which you explicitly joined.
I don't see how your feedback justifies "poorly thought out"; it's merely an unpolished preview.
Inboxes for a set of related services could conceivably be merged, tho I haven't done any work on that yet.
DIME - https://en.wikipedia.org/wiki/Dark_Mail_Alliance
Math Mesh - https://mathmesh.com
TMTP - https://mnmnotmail.org (my work)
https://mnmnotmail.org & https://twitter.com/mnmnotmail
Because SMTP will not be fixed, here's why: https://mnmnotmail.org/smtp.html
---
Related protocol projects in development include:
Those big corporate advocates necessary for the success of a new email protocol are fortunately not the major email hosting players! See the mnm FAQ #2 for a plausible adoption path.
I saw a need for a safer, better, decentralized protocol for email, so I drafted one (TMTP) and implemented client & server. More at:
https://mnmnotmail.org/ & https://twitter.com/mnmnotmail
Related protocol projects in development include:
A handful of credible alternative protocols are now in development:
DIME - https://en.wikipedia.org/wiki/Dark_Mail_Alliance
Math Mesh - https://mathmesh.com
TMTP - https://mnmnotmail.org (my work)
Email was designed in the 1970s & 80s for an Internet whose population and topology have dramatically changed since. We no longer need a messaging system that allows anyone, claiming any identity (i.e. "real name"), to send you any content, without limits. Federation was necessary for the topology of the early Internet, but today it is a drawback -- making email by far the most effective method to initiate cyberattacks.
Are you saying that the Matrix authors won't submit an RFC?
If the former entails an adopted RFC, isn't it common practice to prove need via a product before proposing a standard?
Asking because I'm at work on a safer, decentralized protocol for email, TMTP.
No one was working on an alternative that addresses this problem, so I drafted & implemented "TMTP". It also addresses a variety of other common email problems.
TMTP (my work) is a candidate. More at https://mnmnotmail.org/
It failed because I had no prior experience of developing hardware, and had rather a lot of back luck with HW engineering contractors and contract manufacturers. Some of the story is recounted at https://changelog.com/posts/how-i-volunteered-to-rearchitect...
DIME - Dark Internet Mail Environment
mnm - mnm is not mail (my work)
I never got a "Show HN" link on the prestigious Show page because someone else posted it and made the front page. So I tried some other URLs.
I don't think there's an issue with posting relevant comments with a link, but I agree I should disclose authorship.
--- Flagged post above ---
And because cybercrime, which is now doing staggering damage, much of it initiated via SMTP.
SMTP was designed when the Internet's topology and population were vastly different, and we desperately need to replace it, e.g. with TMTP from the "mnm" open source project: [link]