From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Richard Stallman Newsgroups: gmane.emacs.devel Subject: Re: oauth2 support for Emacs email clients Date: Thu, 12 Aug 2021 23:10:47 -0400 Message-ID: References: <52589.36892.953561.24840@gargle.gargle.HOWL> <87pmuofpai.fsf@gnu.org> <87sfzk71xw.fsf@randomsample> <87k0kw6liw.fsf@randomsample> <87fsvk6i5e.fsf@randomsample> <87sfzhekgv.fsf@randomsample> <87k0kse21n.fsf@randomsample> Reply-To: rms@gnu.org Content-Type: text/plain; charset=Utf-8 Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="4802"; mail-complaints-to="usenet@ciao.gmane.io" Cc: fitzsim@fitzsim.org, winkler@gnu.org, emacs-devel@gnu.org To: David Engster Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Fri Aug 13 05:11:22 2021 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mENbO-000155-8k for ged-emacs-devel@m.gmane-mx.org; Fri, 13 Aug 2021 05:11:22 +0200 Original-Received: from localhost ([::1]:47334 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mENbN-0001qc-7e for ged-emacs-devel@m.gmane-mx.org; Thu, 12 Aug 2021 23:11:21 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:53522) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mENas-0001B7-5x for emacs-devel@gnu.org; Thu, 12 Aug 2021 23:10:50 -0400 Original-Received: from fencepost.gnu.org ([2001:470:142:3::e]:33666) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mENar-0002Om-DU; Thu, 12 Aug 2021 23:10:49 -0400 Original-Received: from rms by fencepost.gnu.org with local (Exim 4.90_1) (envelope-from ) id 1mENap-000389-Uy; Thu, 12 Aug 2021 23:10:48 -0400 In-Reply-To: <87k0kse21n.fsf@randomsample> (message from David Engster on Wed, 11 Aug 2021 11:57:56 +0200) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:272366 Archived-At: [[[ To any NSA and FBI agents reading my email: please consider ]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > What I consider to be more important is that the Thunderbird developers > kindly ask to not copy their client ID/secret for other applications, > and we should respect that. We were talking about using Thunderbird to convince a server to authenticate you, then using the authenticated connection with movemail to read the mail in Emacs. I think you've changed to a different question about a different scenario. > > How would it even notice that he's using Emacs rather than Thunderbird? > By looking over his shoulder, through a security audit of his laptop, or > he might simply tell... That might perhaps happen. Just as an employer might perhaps tolerate use of Thunderbird but not Emacs. This is not impossible. But is that situation likely enough that we need to worry about it? We could say, "Unfortunately, we don't know a way to cope with that situation. We hope you find a less rigid employer." If an employer objects to installing Emacs on the company's laptop, I think the Emacs-using employee will face bigger problems in using Emacs than how to read mail with it. My message ended with this: Emacs can be thought of as a modified version of Thunderbird, right? That's a serious point. Emacs and Thunderbird can, in principle, be merged in many different proportions. There is no clear, correct boundary in that almost-continuum with "Emacs" on one side and "Thunderbird" on the other. You could modify Thunderbird step by step and eventually get Emacs. I wonder, is it possible to take a part of Thunderbird and modify it into a mail-fetcher program that produces an inbox file, for use in place of GNU movemail? Does Thunderbird as released have that capability? Maybe people could simply run Thunderbird to fetch the mail using oauth2. -- Dr Richard Stallman (https://stallman.org) Chief GNUisance of the GNU Project (https://gnu.org) Founder, Free Software Foundation (https://fsf.org) Internet Hall-of-Famer (https://internethalloffame.org)