From: svens <sv...@de...> - 2006-04-28 17:36:48
|
I am so sorry that I express myself so poorly. Authentication takes place by the senders-email address, only registered emailaddresses can add, and only into the calendars they are associated with, according to an array/database set up by the administrator. (Now I am not discussing an open calendar, in which case no authentication would take place, of course). This can be done with the php imap-functions. The uid-basis is the identification of the events themselves for tracking them in the calendar and deleting or retrieving them. I don't know much about spoofing anothers email-address, but I reckon an important element of that is that one has to know the registered emailaddress in order to spoof it. In the mail2icalendar I made, this emailaddress is not revealed, so I reckon it's spoof proof enough. >I like the idea of being able to e-mail in events simply because I >wish we had a system that allowed multiple users to edit a calendar, >and programs like iCal (and Outlook, I assume) can e-mail a >small .ics file with just one event, and most people are comfortable >using e-mail. ... >At the end of the day, though, if this functionality is already ready >to go, I certainly wouldn't object to trying it out and potentially >including it, simply noting to users that it is a method without >security. I'll make a test calendar, anyone who wishes to try it, can mail me with their address. I'll also publish the (yet simple code) I used. Of course there is lot room for improvement, but for me, it already works. Mail me at: svens dds nl |