Re: [secdir] Secdir last call review of draft-ietf-jmap-core-12

[Tero Kivinen <[e-mail]>]

Neil Jenkins writes:
> Err, not sure what you're talking about here. Most email systems
> already support sharing on a per-folder (or mailbox as they're
> called in IMAP and JMAP) granularity.

I have no idea how to do that for example in gmail. The imap server I
am running does not list support for 4314, and as I have never needed
such feature I have never checked if or how it can be done.

On the other hand I did not see any support for that in ipad or
android mail software either (or it might be well hidden in those
things, they are not very easy to use). 

> That's why JMAP and IMAP can return you a "myRights" object with
> your permissions for each mailbox. Calendars are identical; you
> generally share on a per-calendar basis (which acts the same as a
> mailbox for mail; a collection of individual data items).

Calendars usually have separate per item flag that tells whether event
is private, i.e., it is not only per calendar or per mailbox level.

Anyways, I have seen several cases where people share their personal
calendars, I have not seen cases where people share their personal
mailboxes. There cases where family members know other members
passwords, and can login if needed. Also group mailboxes, or reading
mail from multiple accounts in same mail software is very common,
sharing private mail boxes not so.

I.e., is it really common that:

      ... another user is sharing their mail with the logged in
      user,...

when not talking about group (support etc) or role (secretary) based
mail boxes?

If so, I am happy that I live in places where people do value
privacy, and I have not seen such things done... 
-- 
[e-mail]