Hello-email: The email starter kit for Glitch!

The Gallery
1

hello-email

Email on Glitch!

It uses the sendmail package to send emails without a STMP server, like PHP’s mail() function, but in Node.js!

I setup a little demo of it (like hello-express) and it automatically changes to your Glitch project’s name on remix!

When using the public demo, you will get a email from noreply@hello-email.glitch.me, so make sure to whitelist it!

Remix this project and then you have your own private email sender! Happy coding!
( ᵔ ᴥ ᵔ )

Project URL: hello-email.glitch.me

15 Likes
2

wow nice!
if only they didnt get ignored by gmail :frowning:

6 Likes
3

It’s because of something called DKIM. DKIM tells the receiving email server is fully authorized. I can’t do DKIM as well, I don’t have control over the glitch.me DNS records.

7 Likes
4

I’m confused by the name do you make email accounts or just emails

1 Like
5

Oh cool, it works!

2 Likes
6

Just send emails.

2 Likes
7

oof i guess i was dumb for thinking you made a website that makes email accounts

2 Likes
9

You are not dumb. I just didn’t clarify.

2 Likes
10

Imma stop talking now

2 Likes
11

XSS lol

2 Likes
12

I recommend using a custom domain with a SPF record or something of the sort so you are not spam. :slight_smile:

4 Likes
13

Someone can use this for bad purposes like emailing from a domain that they don’t own like my domain, nicsena.tk by using this project and they can pretend to be me or someone else at a domain too.

2160×1620

2160×1620

Gmail didn’t reject the email. Oof.

2160×1620

2 Likes
14

You’re right, someone could put support@glitch.com as their sender email and pretend they’re Glitch Support, how can this be fixed?

1 Like
15

You’re both right, but that’s not the fault of aboutDavid’s project, it’s just a design feature of email generally. You can make an email appear to come from any address in the world, and it’s always been pretty easy to do so (with or without this project).

The burden is on email clients like Gmail, Outlook etc. to tell you whether or not an email is legitimate, and that’s why standards like DKIM exist. Emails that fail DKIM will usually go straight to junk/spam.

tl;dr - Not aboutDavid’s fault, it’s email’s fault. It’s always been this way. But it’s ok :slight_smile:

6 Likes
16

IIRC ff the glitch.com domain has spf and dkim records in their DNS settings it should pretty much be impossible for anyone to spoof the email address.

EDIT Not impossible, more like the receiving end would verify that the email was actually sent by glitch.com and not some random place. A decent email provider will reject a mail that fails the dkim signature.

5 Likes
17

Yes, you’re right. But this could still happen to other business emails made by small organizations, new coders, and others. Like, i could be sending out random emails pretending to be big youtubers like Pewdiepie or DanTDM.

Now this was just an example, like, imagine people falling for this. I do not think this should happen - like, aboutDavid needs to put some kind of security measures to prevent this.

1 Like
18

Absolutely! I just thought it would be a good idea to point out it is possible to protect oneselves against email spoofing :wink:

I wish there was some sort of signature check for how SMS and MMS work, phone number spoofing and phone label spoofing is way too simple! The SMS and MMS protocols could use an update XD

3 Likes
19

This is pretty much a test if your domain is all set up with the right DNS records.

1 Like
20

I have a question: how do you add an attachement to the email

1 Like
21
1 Like