From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Tim Cross Newsgroups: gmane.emacs.devel Subject: Re: gmail+imap+smtp (oauth2) Date: Fri, 06 May 2022 23:05:17 +1000 Message-ID: <875ymiero9.fsf@gmail.com> References: <87k0b2tkg1.fsf@mat.ucm.es> <87zgjx4qhs.fsf@gmail.com> <87bkwcgmr3.fsf@mat.ucm.es> <87levfzqj2.fsf@yale.edu> <871qx7scvi.fsf@gmail.com> <87v8ujqec5.fsf@logand.com> <87ee172fjz.fsf@gmail.com> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="4472"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: mu4e 1.7.13; emacs 28.1.50 Cc: tomas@tuxteam.de, emacs-devel@gnu.org To: Stefan Monnier Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Fri May 06 15:08:48 2022 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nmxhO-0000wO-OI for ged-emacs-devel@m.gmane-mx.org; Fri, 06 May 2022 15:08:46 +0200 Original-Received: from localhost ([::1]:38342 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nmxhN-0004vh-9a for ged-emacs-devel@m.gmane-mx.org; Fri, 06 May 2022 09:08:45 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:53234) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nmxfb-0003Kr-9S for emacs-devel@gnu.org; Fri, 06 May 2022 09:06:55 -0400 Original-Received: from mail-pg1-x52a.google.com ([2607:f8b0:4864:20::52a]:35645) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nmxfZ-0006UH-Qa for emacs-devel@gnu.org; Fri, 06 May 2022 09:06:54 -0400 Original-Received: by mail-pg1-x52a.google.com with SMTP id a191so6088529pge.2 for ; Fri, 06 May 2022 06:06:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=references:user-agent:from:to:cc:subject:date:in-reply-to :message-id:mime-version; bh=Z5xjN7+0e5YVrTjOYocAZWpWBqpInWE8OvHDdP497xQ=; b=DHBHEefpxHZ1fallTL2caQli7LGcT/Q7MFtalKZHlrGmtkg1EvYUP4QOWEmUjQ2H9q Hj5nFP2xYJo10usP8hRSfj3OhoBEeFldTwCiR3gDDAxmOmYhMpstpz1fzUHFEAEzzmAS wmoMOhz4ALkVWCOT3t3I3ftzLm+XEmX+nSLAP1KvxkDKbYOK2BdZCG7TGHEeqDo1e8QI PpT/AvgG/tKm1i+42vzZ4nY6y5NPwtrwh4soWaGM8UVwDQ8LSe5ez+mCudJP1oAZFZH+ r0PTpCgD5t63hYd0HEphLY5CxSbxbLI3MgdyRBv+sjAhKe/8x1Ri5VQpUXPyCaRVhG7l Ku3A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:references:user-agent:from:to:cc:subject:date :in-reply-to:message-id:mime-version; bh=Z5xjN7+0e5YVrTjOYocAZWpWBqpInWE8OvHDdP497xQ=; b=njBrT03VesgG+Omw42EqQ2Wjw+cJk3iZXrrwRQK2mPWklZ7EsrjlUQpiEQpSKKSaxl kbolZhioebMexdQSy6J9EHftCNHX888cH4VfEetR5Voa6/ntbW97QGJfXLLFWh1LgW5n /BXSB0liDEbQTc/zON4MUijqxfECtnMOR9p0ZtwCrEx9t9Gjp1B5Lw/r4o/uq4zTCyVc ht1TmzFnVGdWM+ZsrKsKR8NjyFWbeCwLio6NNda0yIioMPe8L+CA+QhVQ++sq95+xQyS cULg/Bb9ShTb0j4ICwyPJb1rBnm5GYYXqlWwoce+5L8yaflCwQ7ipDnpmhor0ewjnVtp q1iA== X-Gm-Message-State: AOAM530hKw25cdXyPJLITSjLi9SvX1ATaRcDvRbFpkjotRzaB8C3Dppz cTArJiQd/Ylzz1LqbgaLScRpSNwvIvg= X-Google-Smtp-Source: ABdhPJwXdeJDW7nV3aHalaXpy82tQRDr1LHDDdAco32FGegIFWHQdNEUso7wMgfyEdGdDSHSt88i6w== X-Received: by 2002:a05:6a00:16cd:b0:4e1:366:7ee8 with SMTP id l13-20020a056a0016cd00b004e103667ee8mr3540507pfc.9.1651842410946; Fri, 06 May 2022 06:06:50 -0700 (PDT) Original-Received: from dingbat (220-235-29-41.dyn.iinet.net.au. [220.235.29.41]) by smtp.gmail.com with ESMTPSA id t6-20020a170902e84600b0015e8d4eb22dsm1738623plg.119.2022.05.06.06.06.48 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 May 2022 06:06:50 -0700 (PDT) In-reply-to: Received-SPF: pass client-ip=2607:f8b0:4864:20::52a; envelope-from=theophilusx@gmail.com; helo=mail-pg1-x52a.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:289321 Archived-At: Stefan Monnier writes: >> We know. They know. We know they know. They know we know they know. >> We've been down this drm-keys-embedded-in-application tango so many >> times already- >> >> Now someone explain to me: why do they nevertheless do it? > > Regardless of this "why", I think what it means is that it's perfectly > OK to use it in Free Software, with the "secret" key in plain sight. > > I think from Google's point of view all it means is that we're more > prone to DoS attacks where someone abuses the "secret" key causing > Google to revoke the key. Google won't suffer from it, we will, so they > don't care. > Agree. I also suspect this is the same rationale being used by Thunderbird and others.