<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" 
      xmlns:thr="http://purl.org/syndication/thread/1.0">
  <link rel="alternate" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php" />
  <link rel="self" type="application/atom+xml" href="http://www.readwriteweb.com/atom.xml" />
  <id>tag:,2008:/1/tag:www.readwriteweb.com,2008://1.6002-</id>
  <updated>2008-05-09T18:03:38Z</updated>
  <title>Comments for Xoopit: Proof that Gmail Needs a Better API</title>
  
  <generator uri="http://www.sixapart.com/movabletype/">Movable Type 4.1</generator>
  <entry>
    <id>tag:www.readwriteweb.com,2008://1.6002</id>
    <link rel="alternate" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php" />
    <link rel="service.edit" type="application/atom+xml" href="http://www.readwriteweb.com/cgi-bin/mt/mt-atom.cgi/weblog/blog_id=1/entry_id=6002" title="Xoopit: Proof that Gmail Needs a Better API" />
    <published>2008-03-31T18:52:34Z</published>
    <updated>2008-03-31T19:25:06Z</updated>
    <title>Xoopit: Proof that Gmail Needs a Better API</title>
    <summary>Email media management application Xoopit launched in private beta today (invite link below) and announced a $5m venture round from some big backers. Would a good feature set and reputation be enough for you to hand over your Gmail username and password to this application? It&apos;s not good enough for me. Xoopit is aimed at...</summary>
    <author>
      <name>Marshall Kirkpatrick</name>
      <uri>http://www.readwriteweb.com</uri>
    </author>
    
    <category term="Products" />
    
    <category term="data portability" />
    
    <content type="html" xml:lang="en" xml:base="http://www.readwriteweb.com/">
      <![CDATA[<p><span class="mt-enclosure mt-enclosure-image"><img alt="xoopitlogo.jpg" src="http://www.readwriteweb.com/images/xoopitlogo.jpg" width="150" height="42" class="mt-image-left" style="float: left; margin: 0 20px 20px 0;"/></span>Email media management application <a href="http://xoopit.com">Xoopit</a> launched in private beta today (invite link below) and announced a $5m venture round from some big backers.  Would a good feature set and reputation be enough for you to hand over your Gmail username and password to this application?  It's not good enough for me.</p>

<p>Xoopit is aimed at the widespread practice of sharing media like photos, vidoes and PDFs by email.  If anyone but the big webmail vendors is going to launch an "inbox 2.0" type product, though, there's going to have to be a better API that lets me access content without giving up my password.</p>]]>
      <![CDATA[<p>Xoopit lets you view, sort and share all the media in your GMail inbox through a web page, Firefox plug-in or Google Gadget.  Integration with other webmail programs is coming soon.  It's a pretty good experience, though readers here probably run in more sophisticated circles where plenty of media is shared on websites dedicated to that purpose.  None the less, this could be a particularly good example of a mainstream end-user opportunity to leverage data portability - if it were able to be done correctly.</p>

<p>Xoopit doesn't offer a Flash player to listen to music or view PDFs in your inbox, you still have to download those locally and consume them with other applications. (See <a href="http://pdfmenot.com">PDFmenot.com</a>, by the way.) The service may be appealing to more mainstream users who communicate almost entirely through email.  Will those users give up the usernames and password to their email accounts, though?</p>

<p>If you'd like to try it out yourself, you can <a href="http://www.xoopit.com/signup?i=rww">access a beta account through this link</a>.  We've written about <a href="http://www.readwriteweb.com/archives/your_email_password_a_true_hor.php">email password horror stories here before</a> and RWW does take any responsibility for anything that happens if you give a third party yours.</p>

<h2>We Need Webmail Content APIs</h2>

<p>Gmail <a href="http://www.readwriteweb.com/archives/google_releases_contacts_api.php">released a Gmail Contacts API</a> this month.  That's a great way to see who among your friends uses a new application you're using.  It does not allow access to the content of your emails, however.  All the webmail vendors, <a href="http://www.readwriteweb.com/archives/yahoo_says_the_future_will_be.php">most prominently Yahoo!</a>, are working on creating an "Inbox 2.0" experience for users - moving beyond simple one-off messaging and offering an Attention Data driven, media savvy communication hub.  </p>

<p>Should users demand more portability, though, for the actual content of our email?  Secure portability of content into the hands of 3rd parties seems like a vital step in enabling a whole ecosystem of innovation.  Otherwise instead of <a href="http://www.niallkennedy.com/blog/2008/01/data-portability-authentication-authorization.html">best practices in user authentication</a>, we get stuck with virtual home decorators unable to anything for us unless we give them a copy of our house keys.  At least the people in an analogy like that would be licensed and bonded.  Let some brand new web app startup into my email account, with my username and password?  No thanks.</p>

<center><img alt="xoopitscreen.jpg" src="http://www.readwriteweb.com/images/xoopitscreen.jpg" width="600" height="425" ></center>]]>
    </content>
  </entry>

  <entry>
    <id>tag:www.readwriteweb.com,2008://1.6002-comment:50688</id>
    <thr:in-reply-to ref="tag:www.readwriteweb.com,2008://1.6002" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php"/>
    <link rel="alternate" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php#c50688" />
    <title>Comment from Tom Liv on 2008-03-31</title>
    <author>
        <name>Tom Liv</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        <![CDATA[<p>"...RWW does take any responsibility for anything that happens if you give a third party yours."</p>

<p>That's REALLY kind of you!</p>]]>
    </content>
    <published>2008-03-31T21:15:51Z</published>
  </entry>

  <entry>
    <id>tag:www.readwriteweb.com,2008://1.6002-comment:50690</id>
    <thr:in-reply-to ref="tag:www.readwriteweb.com,2008://1.6002" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php"/>
    <link rel="alternate" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php#c50690" />
    <title>Comment from rick gregory on 2008-03-31</title>
    <author>
        <name>rick gregory</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        <![CDATA[<p>Spot on Marshall. I read about this over on CNET  a few minutes ago and got to the part about handing over my username and password... and immediately lost interest. These folk might be the nicest, most ethical people on the planet - but I'm NOT handing over my username and password. </p>

<p>The industry is sending out contradictory messages right now - manage your online reputation, guard against ID theft... but give your login information to cool new services. We absolutely need some way for those to both happen and not be contradictory. </p>]]>
    </content>
    <published>2008-03-31T21:35:36Z</published>
  </entry>

  <entry>
    <id>tag:www.readwriteweb.com,2008://1.6002-comment:50696</id>
    <thr:in-reply-to ref="tag:www.readwriteweb.com,2008://1.6002" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php"/>
    <link rel="alternate" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php#c50696" />
    <title>Comment from Brian on 2008-03-31</title>
    <author>
        <name>Brian</name>
        <uri>http://briansim.com</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://briansim.com">
        <![CDATA[<p>Some things don't need an API. Email content is one of these things. Once you make something portable, it automatically becomes a little more insecure. For example, my mobile phone is a little more insecure than my laptop, which is a little more insecure than my desktop, which is much more insecure than the unwired, stationary ENIAC that's sitting in some coffer somewhere. I think Google's done more than enough in offering content portability by offering IMAP access in addition to POP.</p>]]>
    </content>
    <published>2008-03-31T22:45:32Z</published>
  </entry>

  <entry>
    <id>tag:www.readwriteweb.com,2008://1.6002-comment:50697</id>
    <thr:in-reply-to ref="tag:www.readwriteweb.com,2008://1.6002" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php"/>
    <link rel="alternate" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php#c50697" />
    <title>Comment from Jonathan Katzman on 2008-03-31</title>
    <author>
        <name>Jonathan Katzman</name>
        <uri>http://www.xoopit.com</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.xoopit.com">
        <![CDATA[<p>Hi, this is JK, one of Xoopit's founders. We've seen the comments regarding email passwords and privacy issues here and elsewhere. You can think of Xoopit as a mail client, which makes it possible for you to access your mail data. We use industry best practices to secure our service and encrypt your password and have rigorous internal policies on the same.</p>

<p>We just put up a very frank post on our blog on how we manage your data (and we link back to Marshall's post, as we want the same APIs he's describing here).</p>

<p><a href="http://blog.xoopit.com/2008/03/how-xoopit-mana.html" rel="nofollow">http://blog.xoopit.com/2008/03/how-xoopit-mana.html</a></p>

<p>Please comment or email me if you would like to have a further conversation on this.<br />
</p>]]>
    </content>
    <published>2008-03-31T23:04:10Z</published>
  </entry>

  <entry>
    <id>tag:www.readwriteweb.com,2008://1.6002-comment:50701</id>
    <thr:in-reply-to ref="tag:www.readwriteweb.com,2008://1.6002" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php"/>
    <link rel="alternate" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php#c50701" />
    <title>Comment from Oren (Hydra) on 2008-03-31</title>
    <author>
        <name>Oren (Hydra)</name>
        <uri>http://www.hydranetwork.com</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.hydranetwork.com">
        <![CDATA[<p>OR...</p>

<p>It seems as if you can give xoopit ANY valid gmail login info, but use it on all your accounts. The plugin is native to the browser, not the account, so you can just signup an empty new gmail, plug that info in, but use it on your real account...</p>]]>
    </content>
    <published>2008-03-31T23:37:13Z</published>
  </entry>

  <entry>
    <id>tag:www.readwriteweb.com,2008://1.6002-comment:50726</id>
    <thr:in-reply-to ref="tag:www.readwriteweb.com,2008://1.6002" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php"/>
    <link rel="alternate" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php#c50726" />
    <title>Comment from JeanHuguesRobert on 2008-04-01</title>
    <author>
        <name>JeanHuguesRobert</name>
        <uri>http://virteal.com</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://virteal.com">
        <![CDATA[<p>"Mailbox as a Filesystem"</p>

<p>When is it that I can "mount" my Mailbox in my PC's filesystem?</p>]]>
    </content>
    <published>2008-04-01T09:44:20Z</published>
  </entry>

  <entry>
    <id>tag:www.readwriteweb.com,2008://1.6002-comment:50829</id>
    <thr:in-reply-to ref="tag:www.readwriteweb.com,2008://1.6002" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php"/>
    <link rel="alternate" type="text/html" href="http://www.readwriteweb.com/archives/xoopit_for_gmail.php#c50829" />
    <title>Comment from Lenwood on 2008-04-01</title>
    <author>
        <name>Lenwood</name>
        <uri>http://www.lenwood.cc/</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.lenwood.cc/">
        <![CDATA[<p>I agree to a point, but for me the argument loses some merit when you consider that the mail in your Gmail account belongs to you but its stored on Google's servers. A couple of years ago I read that they never delete anything from their servers. You may delete a message from your inbox, but it stays with Google indefinitely. Having said that, you definitely raise some good points here. The bottom line is that Google should offer advanced APIs. Does anyone know of a link or address where we can petition Google?</p>]]>
    </content>
    <published>2008-04-02T04:15:29Z</published>
  </entry>

</feed>