From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Tim Cross Newsgroups: gmane.emacs.devel Subject: Re: gmail+imap+smtp (oauth2) Date: Thu, 05 May 2022 02:33:27 +1000 Message-ID: <87mtfx458j.fsf@gmail.com> References: <871qxbdulc.fsf@mat.ucm.es> <877d72nf3h.fsf@gmail.com> <87zgjx9upa.fsf@telefonica.net> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="18939"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: mu4e 1.7.13; emacs 28.1.50 Cc: emacs-devel@gnu.org To: =?utf-8?Q?=C3=93scar?= Fuentes Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Wed May 04 18:53:59 2022 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nmIGD-0004h4-TH for ged-emacs-devel@m.gmane-mx.org; Wed, 04 May 2022 18:53:57 +0200 Original-Received: from localhost ([::1]:57738 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nmIGC-0003Jw-U1 for ged-emacs-devel@m.gmane-mx.org; Wed, 04 May 2022 12:53:56 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:55406) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nmI7P-0004H5-T7 for emacs-devel@gnu.org; Wed, 04 May 2022 12:44:51 -0400 Original-Received: from mail-pj1-x1030.google.com ([2607:f8b0:4864:20::1030]:36671) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nmI7O-0008CX-BV for emacs-devel@gnu.org; Wed, 04 May 2022 12:44:51 -0400 Original-Received: by mail-pj1-x1030.google.com with SMTP id gj17-20020a17090b109100b001d8b390f77bso5693363pjb.1 for ; Wed, 04 May 2022 09:44:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=references:user-agent:from:to:cc:subject:date:in-reply-to :message-id:mime-version:content-transfer-encoding; bh=RRQQzABNcWhWEzVSUGFxOiFZ2NSa5wA06Eyyz0qkOY0=; b=f6plg8pLiGjoQ1LtBN4mwu3Gmn1jNJLSRNgf05FP+Qf4zs26sttjgjrWUyO+0eoqJq zL+I1y9Ab52tnMu45dtIwp/OWXg+dOG5Q6BoFcSgiH+nNWPKdu26IFnvCGaq21vv6hiI ontv/zLYvYN4h3dRlNehYCKXqt3COyd/A6I39f6pWpRsqB1KJT65ni5EmKffsFqNSqRt 6HeteooK/ozBUShf3qrcFW0DLSvV3ngyYgLHwRD/eTNTRcjyl4e561QUIvaNWsG9SzL6 qLdCdZYxX2afD1AIPM2LBFP2JcWusC5L2xBJ9dYw21D8OUk5RkivRGZrJk2Pra9dIfZg bkWQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:references:user-agent:from:to:cc:subject:date :in-reply-to:message-id:mime-version:content-transfer-encoding; bh=RRQQzABNcWhWEzVSUGFxOiFZ2NSa5wA06Eyyz0qkOY0=; b=vuDcommj5hUqC7S2ORZOD025p0IbQDt9cpszZVT9lt56NGrHJsvut5oTUa7XuQQ0rW eD7Ad6jnlo3wGyuZqrYfsXpHK8Yz6h9mI9k023VN7Z118Tpgp3dz2qdQqZ3jEUyXXQbg cmSpD1+5Cvna7Orhed9+62DMdCk3sL4DpU+GZELERsza8KunG6yJHOPer6VDCT771lZk TdZqeg9l1YLyrU8ai6SeNwnarq55pA1k/I8kBCpf1tkH73d7pY/MhfAo17+AJPPYmiJ5 qw/9Zosrk6EK1+43Ig93pAgnCrYwI+zasZgmf/MR/Lf5FNTVebCOF2ZlcD3KU23//mxI IMVw== X-Gm-Message-State: AOAM532Twkt2/5L5S8tFleiCzRukqUFQJ9MwKDgw9adAD237TWL5r92E KR2/DgSQ3q0MbvfqLlNGpHWU1UIi1mg= X-Google-Smtp-Source: ABdhPJzEtqTKxXTynV97uqDhSRLRpFCYN/la39Vag9cqrPGgt+pf4RoUe+ACdV6LOG7noyLHf9U3vg== X-Received: by 2002:a17:90b:1649:b0:1dc:890e:2407 with SMTP id il9-20020a17090b164900b001dc890e2407mr374654pjb.113.1651682688758; Wed, 04 May 2022 09:44:48 -0700 (PDT) Original-Received: from dingbat (220-235-29-41.dyn.iinet.net.au. [220.235.29.41]) by smtp.gmail.com with ESMTPSA id bt21-20020a17090af01500b001d967248885sm3491850pjb.29.2022.05.04.09.44.46 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 04 May 2022 09:44:48 -0700 (PDT) In-reply-to: <87zgjx9upa.fsf@telefonica.net> Received-SPF: pass client-ip=2607:f8b0:4864:20::1030; envelope-from=theophilusx@gmail.com; helo=mail-pj1-x1030.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:289197 Archived-At: =C3=93scar Fuentes writes: > Tim Cross writes: > >> Google introduced the concept of app passwords back when they first >> implemented 2FA. Basically, they are just a password based >> authentication workflow which can be used with applications that do not >> support 2FA or oauth2 based authentication and authorisation. > > [snip] > >> Google is removing access to imap/smtp using your main google >> login/password and will require 2FA and oauth2 for all web based >> authn/authz. However, their documentation implies that app passwords >> will remain as the standad solution for applications which cannot do 2FA >> or oauth2.=20 > > If I read this right: > > https://support.google.com/accounts/answer/185833?hl=3Den > > app passwords require to have 2FA turned on. So you have to go through > the 2FA process anyway with app passwords. All new google accounts have to do 2FA already. I suspect they will soon require existing accounts to enable it as well. Enabling 2FA is very simple and it works well. Basically, you only need to do the 2FA login the first time you connect from a new device or browser. 2FA based authentication is becoming the norm and I appeciate the additional protection.