![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png)
Title:
Allow comments by replying to email notification
Area:
email, comments
Summary:
Use the same mechanisms used for post-by-email to allow comment-by-email. That is, comments by email should only be allowed from your registered address(es), and you should have to enter a PIN.
Description:
Currently DW allows post-by-email (http://www.dreamwidth.org/manage/emailpost) but doesn't allow you to reply to comments by email. This proposal adds commenting while avoiding some of the security problems that Livejournal (allegedly?) has with their reply-form-in-the-email solution.
Basically, we just add an option to the "mobile post settings" saying "Also allow comments by email". When commenting by email, you would have to put the PIN in the text of the comment. We could specify eg. that it should be the first line of the comment:
PIN: blahblah
A simple regexp should be able to strip PINs from comments and then check them against the user's actual PIN and make sure it's the right one.
The comment notification email should include a message to the effect of "Want to reply via email? Set it up here." (if you aren't registered for email replies) or, "To reply by email, simply reply to this message and include your PIN as described here" (with a link to the help or whatever).
This suggestion:
Should be implemented as-is.
28 (58.3%)
Should be implemented with changes. (please comment)
1 (2.1%)
Shouldn't be implemented.
1 (2.1%)
(I have no opinion)
17 (35.4%)
(Other: please comment)
1 (2.1%)