[Design] [Scooby] Anonymous access to read-write tickets and security concerns

[Brian Moseley]

On 7/11/06, Pieter Hartsook <hartsook at osafoundation.org> wrote:

> Supplying another person's email address to a service, even an
> ostensibly benign one, without their permission is a breach of
> confidence. I know someone who goes ballistic when she receives an
> email "invitation" to share my photos, calendar, etc. from a
> third-party service. She fears her email address will wind up on spam
> lists.

such a person is probably not the target user for a sharing service.

> So the issue here is not just having your calendar spammed, but having
> someone receive unsolicited email from a server they don't know. A
> "ticket" from a personal contact that gives the intended R or RW
> access avoids having a causal sharee (perhaps this scenario could be
> limited to Read Only) having to provide either their email or set up
> an account.

i think that is accounting for paranoia, which is beyond the call of
duty. furthermore, it's the sharer's chandler sending notifications,
not the server.