News for hackers. Stuff that matters.
Re:Show HN: Forlater.email – an email-based bookmarking service by georgyo on Sunday September 19, 2021 @06:21AM (#28583148)
Interesting idea, I like it.

The biggest problem I see is that this is going to (eventually) be used by spammers.

I can send a mail with a FROM anywhere with a link. That link will be advertising for something, and your service will mail it off to some unsuspecting person.

This means your mail server's reputation will end up being black listed everywhere.

Enforcing DKIM/SPF validation would help a lot (but not perfect). I verified that you are not currently doing any validation today. I was able to spoof my gmail address from my residential IP. You do not have very long to fix it before it gets abused.

Re:Show HN: Forlater.email – an email-based bookmarking service by icy on Sunday September 19, 2021 @06:40AM (#28583237)
Good catch. I'll implement this.
Re:Show HN: Forlater.email – an email-based bookmarking service by cooperaustinj on Sunday September 19, 2021 @08:06AM (#28583682)
I haven't played with the service like the other user, so I'm not sure whether this idea is viable.

You could send some sort of initial opt-in email to the recipient that would let them verify their desire to use your service. This combined with usual email validation should be good to keep spammers out.

Re:Show HN: Forlater.email – an email-based bookmarking service by dubcanada on Sunday September 19, 2021 @08:57AM (#28583978)
Ya I think a initial optin would be the easiest/best way to do this.
Re:Show HN: Forlater.email – an email-based bookmarking service by georgyo on Sunday September 19, 2021 @11:34AM (#28585130)
I would argue that having that flow would also require a database and heavily reduce the usefulness for new users / experimenters.