Yes, it parses based on the from email. The short answer is that it doesn't protect against email spoofing. I do have some filtering set up, but it hasn't been effective in my testing.
However, you do receive a confirmation email after every new post. So if someone spoofed your email to make a post, you would get a notification email about that post. In the notification, you'd see what had been posted and could easily delete it. (Note that the email address associated with an account isn't made public anywhere, so someone would need to have doxxed you in this scenario.)
Of course, it would be pretty easy for a determined attacker to set up a mailbomb that flooded someone's page with hundreds of spoofed posts. At that point I would have to disable email posting for that account to stop the attack.
My thinking was that this would be good for faster/easier posting. E.g.: someone making a travel blog for friends and family who wants to post from their phone on the train to the next city, or someone who wants to quickly share or save links that they run across "in the wild". I agree that for someone posting long-form content there's no benefit over working in an editor.
Readit News
Also, welcome!
We also made markdown-based blogging platform over here :
https://rtnf.my.id/markdown_blog
Also, apparently Weejur still dont support markdown table. Take a look here https://www.weejur.com/rtnf/#41
When properly rendered, it should be looking like this https://altilunium.my.id/p/WEE
I recommended MarkedJS for basic, proper markdown compiler.
Thanks for the bug report. I've used python-markdown [0] for the markdown parsing–I'll have to double-check the implementation.
[0]: https://python-markdown.github.io/
However, you do receive a confirmation email after every new post. So if someone spoofed your email to make a post, you would get a notification email about that post. In the notification, you'd see what had been posted and could easily delete it. (Note that the email address associated with an account isn't made public anywhere, so someone would need to have doxxed you in this scenario.)
Of course, it would be pretty easy for a determined attacker to set up a mailbomb that flooded someone's page with hundreds of spoofed posts. At that point I would have to disable email posting for that account to stop the attack.
I'd be interested if you have any suggestions!