sebsauvage / ZeroBin

A minimalist, opensource online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.

Home Page:http://sebsauvage.net/wiki/doku.php?id=php:zerobin

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Add RSS

SoniEx2 opened this issue · comments

Idk I think it'll be a nice feature. It's for comments ofc.

Some kind of optional email notifications could also be nice. They wouldn't necressarily have to contain the comment, information about new comment would be enough.

(See the following comment.)

RSS could be nice on comments, indeed.
About email: I hate that idea. Zerobin was made so that the server has no
knowledge of the stored data. Sending emails is not enabled on every server
and leaves logs. If one of the target emails is not self-hosted (Gmail,
Hotmail, ...) the company or a government would have access to the
discussion, thus compromising the anonymity of the discussion and of the
Zerobin instance.

@pVesian not necessarily true, though I am not a fan of the idea of email notifications. It could be possible to send participants a notification that there is an update to the discussion, without sending the actual comment that was added. It is also up to the administrator of the server how the email will be delivered. It could make an SMTP connection out to a mailserver, which wouldn't be too bad. It's just more trouble than it's worth, but it wouldn't necessarily compromise security.

RSS 👍

Mail (Notifications) 👎

A Pastebin shouldn't deal with storing user data or logins imo.

It could be possible to send participants a notification that there is an update to the discussion, without sending the actual comment that was added.

but it would probably send the link to the paste including the encryption key.

@Mkaysi depends how it's done, could potentially only include an identifier and expect the recipient to have the link saved.

How would it be able to send the encryption key since the webserver doesn't have it? Unless you want to implement sending emails in javascript... (ick)

Dealing with storing and verifying email addresses probably isn't worth it. Better to provide some API hooks, and users who want email can set up a mailing list server and use them to trigger sending update messages. Keeps it tidier that way.

Even better, you could include title support and optional passwords. This way if the paste is intended to be private, the e-mail notification will not be able to ruin that for you.

I would be interested in adding this to my zerobin fork, if it wouldn't require me to stop being lazy.