From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Tim Cross Newsgroups: gmane.emacs.devel Subject: Re: gmail+imap+smtp (oauth2) Date: Thu, 05 May 2022 02:48:09 +1000 Message-ID: <87ee1944q0.fsf@gmail.com> References: <871qxbdulc.fsf@mat.ucm.es> <877d72nf3h.fsf@gmail.com> <87zgjx9upa.fsf@telefonica.net> <87zgjx5mek.fsf@gmail.com> <87v8ul9tho.fsf@telefonica.net> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="3334"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: mu4e 1.7.13; emacs 28.1.50 Cc: emacs-devel@gnu.org To: =?utf-8?Q?=C3=93scar?= Fuentes Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Wed May 04 18:58:11 2022 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nmIKJ-0000fJ-Tn for ged-emacs-devel@m.gmane-mx.org; Wed, 04 May 2022 18:58:11 +0200 Original-Received: from localhost ([::1]:40370 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nmIKI-0002SD-Lr for ged-emacs-devel@m.gmane-mx.org; Wed, 04 May 2022 12:58:10 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:59228) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nmIIA-0006go-3c for emacs-devel@gnu.org; Wed, 04 May 2022 12:55:58 -0400 Original-Received: from mail-pj1-x102c.google.com ([2607:f8b0:4864:20::102c]:51127) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nmII8-00035W-HD for emacs-devel@gnu.org; Wed, 04 May 2022 12:55:57 -0400 Original-Received: by mail-pj1-x102c.google.com with SMTP id iq10so1776998pjb.0 for ; Wed, 04 May 2022 09:55:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=references:user-agent:from:to:cc:subject:date:in-reply-to :message-id:mime-version:content-transfer-encoding; bh=LZ7aD42DeX9L3LlG2H6uOGwZIvxNYakTdu7jq+2b3TI=; b=K0QlQyMFKkLdTJjr62/qEW8Yb5+PqGvgcS9BenVJ7uz2SmnnhtepMVwcbAzt+4+ob2 RwO8jcXvI/UfA7TIWsTKUv8/EsnR6leZM0i38hv4GbvPkqXO/Dt/QisPlW0SyLlW5hQg eZy8YhQXir+OwNKRPFRptcd0vT9tq+xpN5Xl2Jm5O8zpO+XpNCovPyx/vPkm0OCxb4Rp sdUhwfeVbj/bIEintJFjegCd+L5N9fu6r4wJxDfSW1+2DnfnrelhoDBatmGJ6WzwzKLr dPRFilYavOAECc8+Sp6tCTWFGAPvAChhsSzUuljATtEzM/t07NEciYwaOqelDiTTeDUU 9aRw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:references:user-agent:from:to:cc:subject:date :in-reply-to:message-id:mime-version:content-transfer-encoding; bh=LZ7aD42DeX9L3LlG2H6uOGwZIvxNYakTdu7jq+2b3TI=; b=3HJZzvPpn/LOG3crPUOEL2/4E6YjMK5Jc9gAHJ0GAlM/gS1JAKNOhMOxPx5Gm2ht7w IB404s+5U0DE8cq/ww3UYnOEdH2gJJwaGilo3BlKg8NdKYRxDgO2RwTg8fwsWfVggnMJ 080eiwZnrFyM1+KUyEI4qAwv7Co28z7SO55zzzZ2JBUyyWmPpApqalLHlRi23yug+Ov4 m1hmpQDh43cvEfm8cJcR2Pb3H9X2jENa1j1USZj5tRcfxUDBF7A5Qepk7kudPCjiTNPD WARs353CXMnRLjRXpJ9Oa6C5RyblwUvVjAaBdAIOfxPkBbFpyk3+Ycg7kwgVyy84Itm4 AeHg== X-Gm-Message-State: AOAM5316SL3yztp6wOLafiXJGj6IxLpzVqq6mhlI+wrLD4wAaCirUFSX 0u7Py+Ns6Dl1glkxBxgFH5u/JM1EfJY= X-Google-Smtp-Source: ABdhPJzubp15SJ8fv1OgVsAvrSgq285Ftd8PMplkC/YkEe/g0e09oOFbospoHFIp9rN0KeSMfv6cDg== X-Received: by 2002:a17:902:f608:b0:158:29e6:c88 with SMTP id n8-20020a170902f60800b0015829e60c88mr22130300plg.174.1651683354909; Wed, 04 May 2022 09:55:54 -0700 (PDT) Original-Received: from dingbat (220-235-29-41.dyn.iinet.net.au. [220.235.29.41]) by smtp.gmail.com with ESMTPSA id b10-20020a17090a550a00b001d954837197sm3483310pji.22.2022.05.04.09.55.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 04 May 2022 09:55:54 -0700 (PDT) In-reply-to: <87v8ul9tho.fsf@telefonica.net> Received-SPF: pass client-ip=2607:f8b0:4864:20::102c; envelope-from=theophilusx@gmail.com; helo=mail-pj1-x102c.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:289198 Archived-At: =C3=93scar Fuentes writes: > Robert Pluim writes: > >> =C3=93scar> If I read this right: >> >> =C3=93scar> https://support.google.com/accounts/answer/185833?hl=3Den >> >> =C3=93scar> app passwords require to have 2FA turned on. So you have= to go through >> =C3=93scar> the 2FA process anyway with app passwords. >> >> When creating the app password, maybe (it=CA=BCs been so long since I >> created my app password for Gnus that I don=CA=BCt remember). But *using* >> the app password just requires presenting it using the normal >> IMAP/SMTP/etc authentication protocols. > > Good to know, thanks. So you don't have to bear with 2FA each time you > access your e-mail, but the privacy concern doesn't change: you must > give your phone number to Google. Not sure if that is true. Google originally used SMS based 2FA (as did many service providers originally). However, that approach is no longer preferred (I think they still support it, but don't recommend it). However, I think they now support a couple of different 2FA schemes, such as using an authenticator app you register by scanning a QR code and I think they now also support hardware keys like yubikey. They don't need yuour phone number for these methods (but I'm not sure if they still require you to provide it). Still, if privacy is your concern, I'm not sure you should be using google anyway! Worrying about them having your phone number is minor compared to all the data they have about you in your emails (which probably also have your phone number in some of them anyway).=20