Skip to content

The E Mail Context

idk edited this page Jan 13, 2020 · 2 revisions

This is the context which is launched for general I2P-to-Anywhere e-mail using SusiMail and Postman's services.

Things to be thinking about

The whole purpose of an e-mail application is to take data from an source, process it, and display it. Since this is happening in a web browser, there is the danger that the displayed resource will include code which fetches a remote resource. The risk of this in SusiMail is low, but if an attachment is opened in the browser the risk becomes much higher, a PDF or some video files have the ability to fetch remote resources, as do most things that have DRM.

  • Injecting a warning when opening an attachment in the browser is possible and probably the most universal approach.
  • Things like pdf's, mp4's, and webm's which might be played in the browser need to be confined to the webmail context if they originate from the webmail context.The tabs they are in must be demonstrated to enforce proxy obedience.