idea

1 files changed, 12 insertions, 0 deletions

diff --git a/TODO b/TODO
index 5702a9e..0d98317 100644
--- a/TODO
+++ b/TODO
@@ -43,6 +43,18 @@
 * How to prevent abusing servers to store large quantities of data
   that are not legitimate debug-me logs, but are formatted like them?
   Perhaps add POW to the wire protocol? Capthca?
+
+  The user's email address is sent to the server when starting a debug-me
+  session, and once the session ends, the server emails the log file
+  to that address. This serves two purposes:
+
+  1. It makes sure that the user gets a copy of the session log,
+     which the developer cannot delete.
+  2. Once the server has emailed the log, it's free to delete its
+     copy to free up disk space. Since servers don't have to retain
+     log files for long, this makes them unattractive to abusers
+     who might otherwise try to store large quantities of data.
+
 * --server --replicate=host could connect to the other server and forward
   sessions to it. It should be easy to make the replicate bi-directional,
   so a developer could connect to the other server and their messages be