[tor-project] email interface for Trac: a proposal

[teor]

> On 15 Dec. 2016, at 21:41, Silvia [Hiro] <hiro at torproject.org> wrote:
> 
> Hi,
> 
> So I have a bare minimum prototype here: https://gitweb.torproject.org/admin/trac/trac-email.git/tree/notify.py
> 
> But I have started thinking that maybe this shouldn't be a simple script parsing emails. Maybe I am over-thinking this but I am seeing a need in having a service that can perform basic cryptographic verification and small integrations. I will list a few examples:
> 
> 1. Trac email interface to open and reply to tickets.
> 
> 2. Trac authentication for xmprpc (better than just http auth)
> 
> 3. Encrypted mailing lists
> 
> What I am outlining here is a simple service where, for example, we can send a signed request via REST APIs and perform some actions.
> 
> So for example 1 the service will check an email account and verify signatures to open/reply to trac tickets.
> 
> For example 2 there will be an API endpoint where we can send a signed request to interact with trac (better than http auth which is the standard for xmlrpc plugin).
> 
> Example 3 involves people sending encrypted emails w/ the server key, and the server decrypting the email, encrypting with the participant keys and sending the encrypted emails. In this case I wouldn't reinvent the wheel and I would opt for integrating w/ schleuder (https://git.codecoop.org/schleuder/schleuder3/). - Note I am aware of the GPG 2 requirement and haven't fully considered this just yet ;)
> 
> Thoughts? Ideas? 

Are you familiar with db.torproject.org?
It does something similar to this for SSH key and password management.

T

-- 
Tim Wilson-Brown (teor)

teor2345 at gmail dot com
PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B
ricochet:ekmygaiu4rzgsk6n
xmpp: teor at torproject dot org
------------------------------------------------------------------------