From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Allan Sandfeld Jensen Newsgroups: gmane.emacs.devel,gmane.comp.kde.devel.pim Subject: Re: Kmail: Gmail (less secure apps) advice for GNU emacs developers. Date: Mon, 10 Aug 2020 18:46:55 +0200 Message-ID: <3493658.MHq7AAxBmi@twilight> References: <87o8njdlvs.fsf@mat.ucm.es> <5532801.MhkbZ0Pkbq@twilight> <87zh728oco.fsf@mat.ucm.es> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7Bit Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="24164"; mail-complaints-to="usenet@ciao.gmane.io" Cc: KDE PIM To: Uwe Brauer , emacs-devel Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Mon Aug 10 18:53:27 2020 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1k5B39-00068f-3k for ged-emacs-devel@m.gmane-mx.org; Mon, 10 Aug 2020 18:53:27 +0200 Original-Received: from localhost ([::1]:44166 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1k5B38-0004Tn-2q for ged-emacs-devel@m.gmane-mx.org; Mon, 10 Aug 2020 12:53:26 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:38992) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1k5Ax2-00034G-SQ for emacs-devel@gnu.org; Mon, 10 Aug 2020 12:47:08 -0400 Original-Received: from mailrelay3-3.pub.mailoutpod1-cph3.one.com ([46.30.212.12]:61216) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1k5Ax0-0008KJ-9M for emacs-devel@gnu.org; Mon, 10 Aug 2020 12:47:08 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=carewolf.com; s=20191106; h=content-type:content-transfer-encoding:mime-version:references:in-reply-to: message-id:date:subject:cc:to:from:from; bh=WVAlEte1JiuMZnOpY7cLxHM86MwvfFfgP35U9iSpyBk=; b=Zr3SWEvuRnsMd1Y+Ofud1T05o+FiKpQ4gveXnUmL+e2c7Twe04y+PIsP0iMG0Y7TtYZ+c7XhpCr8/ sk91VcE8Xy59v5QicsZjSGI9CZS7igKauxkRRrzNwxM2Lc9qXw5Lbx7aTnOBpx3lIckaVkJOpbSLlj m5F4x5AmdO3N2sYfKuqKaq/hsSFu+uFqQWKeKF+4BKGuEaCzZgtnmplN8/mDMJ3CYsPo+kxr1wFng9 kVtuiOW3SskoHJKfMMJ38xmR+rXsHvgn52n/lFpAc5HjWZtQOih/lca1D5R7KvykytRYKD/qfz1mRw x7Pqpu1Rmhqg6DPR4FSkWEs3v+Rs0tg== X-HalOne-Cookie: 0e69a119f2f52437a6b730ea03817378d8f220a4 X-HalOne-ID: 1977c051-db29-11ea-86eb-d0431ea8bb03 Original-Received: from twilight.localnet (cable-158-181-75-108.cust.telecolumbus.net [158.181.75.108]) by mailrelay3.pub.mailoutpod1-cph3.one.com (Halon) with ESMTPSA id 1977c051-db29-11ea-86eb-d0431ea8bb03; Mon, 10 Aug 2020 16:46:56 +0000 (UTC) In-Reply-To: <87zh728oco.fsf@mat.ucm.es> Received-SPF: none client-ip=46.30.212.12; envelope-from=kde@carewolf.com; helo=mailrelay3-3.pub.mailoutpod1-cph3.one.com X-detected-operating-system: by eggs.gnu.org: First seen = 2020/08/10 12:46:57 X-ACL-Warn: Detected OS = FreeBSD 9.x or newer [fuzzy] X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Mailman-Approved-At: Mon, 10 Aug 2020 12:52:53 -0400 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:253598 gmane.comp.kde.devel.pim:74992 Archived-At: On Montag, 10. August 2020 18:20:07 CEST Uwe Brauer wrote: > >>> "ASJ" == Allan Sandfeld Jensen writes: > > On Montag, 10. August 2020 09:12:12 CEST Martin Steigerwald wrote: > >> Dear Uwe. > >> > >> Uwe Brauer - 10.08.20, 09:02:15 CEST: > >> > Hello > >> > > >> > I am writing on behalf of the GNU emacs developers, Richard Stallman > >> > in particular, asking for advice. > >> > > >> > The issue concerns an announcement by the gmail developers to drop the > >> > option to connect to their IMAP service via name and password, known > >> > as less-secure-apps. The main email reader of GNU Emacs, called gnus > >> > relies on this method. Someone on the GNU emacs developer list > >> > suggested that kmail solved the problem and is able to connect to the > >> > GMAIL imap server using their OAuth2 method. > >> > > >> > So the question is addressed to the kmail developers, but I could not > >> > find an active mailing list just for kmail, so if this list is not the > >> > right place to ask the question, I would appreciate a link to the > >> > relevant one. > > > > I would recommend anyone concerned with privacy rights to not use Gmail. > > OAuth2 is just a way for Google to force people to use Google Chrome for > > logging into google services. Google currently block all privacy secured > > forks of Chromium from using their login services (supposedly because > > some spammers used CEF to log onto GMail). You can make it work at the > > moment by pretending to be Firefox (or by using Firefox), but I am > > guessing it is just a matter of time before Google also block Firefox for > > "security" reasons. > > Ah, well, in a perfect world fine, but for example, my university > switched to Gmail some years ago and will stay. > > Since I don't want to use any other email reader than gnus, and a lot of > people feel this way, any advice on a _technical solution_ is very much > appreciated. > Sure. Only mentioned it because you brought up RMS, I know he is pretty passionate about stuff like that. Btw, you can see an overview in https://developers.google.com/identity/ protocols/oauth2 which also links bindings for a number of programing languages (though not for EMACS LISP). As far as I know KMail uses the libkgapi library, which is a KDE implementation of the whole google client api. I don't think you don't need that much to just do the authentication though, but I am a browser guy, don't know how things looks from the app side. 'Allan