popit3: ZoneEdit 2FA Token Handler

Handler captures ZoneEdit login verification tokens from email and publishes them to WebDAV so a Tampermonkey userscript can auto-fill the 2FA form. Currently ENABLED (uncommented) in process_emails.py.

Email Details

From: support@zoneedit.com (easyDNS / EasyZone Corp). To: jsr_critchley@hotmail.com.

Handler

File: ~/py/popit3/zoneedit_handler.py. Filters by sender + subject regex, extracts token, and on match:

• Uploads the raw .eml to WebDAV at john/zoneedit/token_email.eml (for debugging/audit)
• Uploads token + received ISO timestamp to WebDAV at john/zoneedit/token.txt (line 1 = token, line 2 = timestamp)
• Writes the same to ~/.zoneedit_token (mode 0600) for local/CLI use
• Deletes the source email from the hotmail POP3 mailbox

WebDAV upload uses webdav4.client.Client against webdav.critchley.biz, credentials from ~/.netrc. This WebDAV path requires basic auth — it is not the notes system, whose HTML interface is public, so this is safe to publish tokens to.

Browser auto-fill userscript

Tampermonkey script at ~/py/popit3/zoneedit-2fa.user.js runs on cp.zoneedit.com/tfa.php, polls https://webdav.critchley.biz/john/zoneedit/token.txt every 3s, and auto-fills+submits the token if it's newer than page-load time and under 10 minutes old.

Timing Note

popit3 runs every 5 minutes; token expires in 5 minutes. Trigger a manual ./popit3.py run right after requesting the ZoneEdit login token to maximise the window before expiry.