From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Tim Cross Newsgroups: gmane.emacs.devel Subject: Re: gmail+imap+smtp (oauth2) Date: Mon, 09 May 2022 10:26:38 +1000 Message-ID: <87pmkna6lm.fsf@gmail.com> References: Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="30014"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: mu4e 1.7.18; emacs 29.0.50 Cc: tom@logand.com, jorge@democraciareal.org, emacs-devel@gnu.org To: rms@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Mon May 09 02:33:54 2022 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nnrLW-0007eo-AS for ged-emacs-devel@m.gmane-mx.org; Mon, 09 May 2022 02:33:54 +0200 Original-Received: from localhost ([::1]:35166 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nnrLU-0000xp-Ty for ged-emacs-devel@m.gmane-mx.org; Sun, 08 May 2022 20:33:52 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:47082) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nnrK9-0000Ev-Rp for emacs-devel@gnu.org; Sun, 08 May 2022 20:32:29 -0400 Original-Received: from mail-pf1-x429.google.com ([2607:f8b0:4864:20::429]:34768) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nnrK8-0003Aq-9L; Sun, 08 May 2022 20:32:29 -0400 Original-Received: by mail-pf1-x429.google.com with SMTP id a11so10908486pff.1; Sun, 08 May 2022 17:32:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=references:user-agent:from:to:cc:subject:date:in-reply-to :message-id:mime-version; bh=FLJU1svNcUH4uciRDPnVKwfpB/q+ZJmq1BaSe4/wzZI=; b=OVMMFd0Mj62/RPx2z55XS9+RhrqtlsAD0Ar6m0rYohqQIEgaUEwU+3AIn8z3ixUlFC 76clfXTeWu5BVV72NgrWxS8/sTHnFo6tlTT8wAcN0i/ooUngXAod7NECqwpp+/e4B21o Jk4U5Xhxpn982vujdyPe1TSVfqCWX8Xa++7v7ZoObTM7ZAfAz1J+zb2pBJEJq/TYSCpT OTBOutO2uz4y7cH0x1q2UoM/1YOfc97e7xH0Fw4v7+Rd6iNdKWHNMG7kP9uq33G+E6SH X3MYIgJJFRPq48cUFxTkaYI0vF+0fSt6Bbt4vtkyhwXHxGQPOoJf48ZsGPWBotuMYWlr ZeVQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:references:user-agent:from:to:cc:subject:date :in-reply-to:message-id:mime-version; bh=FLJU1svNcUH4uciRDPnVKwfpB/q+ZJmq1BaSe4/wzZI=; b=13gH7cgNJZ1ZX5buFmEVRle7XoSfMXhSUZVW5x5mmsf4PIrlwwXflv1rdh/DA9oF6s QlilY7/a0w+0/XK/dL7HlK06FPbmoORN3M6mwFHQKrliLXMxoBPu//iuoDimdV0quZtc VQ5pdXy6bdFCEDjTdsqPHKHFCUHM2tD0ra+ij2brtIe/rHShnrkhPb8QPHPQxx90kqeZ 74WkC93lg2D7Cj0Gj3zGF0j3+gn+6EHsg3aeCtiEJYh6QT5mnf4DcvqozqORacUNVZOF p51x1s1t1hwg1EVb9r4AlbiM+kcXmt3PqpTHdC2vEuMmcXSSSavROubpfqxKU8EGz/vI FkOg== X-Gm-Message-State: AOAM531R8dfd1N7l4ZU5XfePtP1AyVg+zzSZ1OH+qCAg4kEJCv01/+X3 +8vGL7Z4ajdvmsWyCNclqlb4TDtTri0= X-Google-Smtp-Source: ABdhPJz/OhxuxZblWt2nlDCF3iQEl+3yfUrfRy3pbWE/g5YcuJP6sNCkicynyqDE+W9tiU/QNK8Wpw== X-Received: by 2002:a63:114c:0:b0:3c2:3346:3c2b with SMTP id 12-20020a63114c000000b003c233463c2bmr11084259pgr.226.1652056345135; Sun, 08 May 2022 17:32:25 -0700 (PDT) Original-Received: from dingbat (220-235-29-41.dyn.iinet.net.au. [220.235.29.41]) by smtp.gmail.com with ESMTPSA id s2-20020a170903200200b0015e8d4eb23asm5640227pla.132.2022.05.08.17.32.23 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 08 May 2022 17:32:24 -0700 (PDT) In-reply-to: Received-SPF: pass client-ip=2607:f8b0:4864:20::429; envelope-from=theophilusx@gmail.com; helo=mail-pf1-x429.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:289511 Archived-At: Richard Stallman writes: > [[[ To any NSA and FBI agents reading my email: please consider ]]] > [[[ whether defending the US Constitution against all enemies, ]]] > [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > > > I disagree. The spec is open and anyone can implmeent it in any language > > they want and can license it according to any license they want. > > Google's implementation may not be open, but someone else could just as > > easily write an implementation which is. > > I have to point out that whether a protocol is "open" is not what we > are concerned about. We do not advocate "open". > > Our concern is whether the Oauth2 protocol can be used to communicate > with Gmail without using any non-libre software. > > Free (libre) and open are different ideas and not equivalent. See > https://gnu.org/philosophy/open-source-misses-the-point.html. The answer is yes. You could implement an oauth2 client which would not require running any non-libre software. However, this does not solve the issue of the application ID being secret. This is essentially what thunderbird have done (and it looks like, ignored the application ID secrecy issue).