From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Richard Stallman Newsgroups: gmane.emacs.devel Subject: Re: gmail+imap+smtp (oauth2) Date: Thu, 05 May 2022 14:37:01 -0400 Message-ID: References: <871qxbdulc.fsf@mat.ucm.es> <87k0b2tkg1.fsf@mat.ucm.es> <87zgjx4qhs.fsf@gmail.com> Reply-To: rms@gnu.org Content-Type: text/plain; charset=Utf-8 Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="21639"; mail-complaints-to="usenet@ciao.gmane.io" Cc: oub@mat.ucm.es, emacs-devel@gnu.org To: Tim Cross Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Thu May 05 20:44:27 2022 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nmgSg-0005TR-Qg for ged-emacs-devel@m.gmane-mx.org; Thu, 05 May 2022 20:44:27 +0200 Original-Received: from localhost ([::1]:39652 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nmgSf-00023B-83 for ged-emacs-devel@m.gmane-mx.org; Thu, 05 May 2022 14:44:25 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:42710) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nmgLW-0002yo-NQ for emacs-devel@gnu.org; Thu, 05 May 2022 14:37:02 -0400 Original-Received: from fencepost.gnu.org ([2001:470:142:3::e]:56762) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nmgLV-0001Tm-WA; Thu, 05 May 2022 14:37:02 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=Date:References:Subject:In-Reply-To:To:From: mime-version; bh=+FfaSTJfwZFiL/AMkcaDu9BJz+QjOy0oQySaUa47lE8=; b=IRWD3+s/4XOf KHLRzf04CejGqmJF99aaTEfV4qjZdlBT1sbR/jAQOCq0FlMo6FuqInfwb9bZ9jLF2U3JdupOZ8unO QdvBdpBX+n6x86G/rxI5XhuHHvPcLcD/3W6krnnkAxwFd0BAZCKtQHk2glnNbjm43EN8deJGv93l8 o4G3jE+9PxHsnj/p+9oUd3aUCtY+JKcb0miaU8mfJkewEV9+63IBniQiRS6JETCiO7Q7zikDQhywu zU6sboLfX0Qz/YnpFbpiOp17zqKwQZpIH84opx4oflJn5Z8p5qKB4w8mkuGEWf4F9z87zpCk3s8sN qUC6yrz4fAlD5V1JRoW+BA==; Original-Received: from rms by fencepost.gnu.org with local (Exim 4.90_1) (envelope-from ) id 1nmgLV-0001XS-Nh; Thu, 05 May 2022 14:37:01 -0400 In-Reply-To: <87zgjx4qhs.fsf@gmail.com> (message from Tim Cross on Wed, 04 May 2022 18:43:12 +1000) X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:289264 Archived-At: [[[ To any NSA and FBI agents reading my email: please consider ]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > your password and then a 2nd factor (fingerprint, code > from an authentication app, hardware key etc). I have to ask whether there is an option for the second factor that isn't unjust. Google should not know your fingerprint, and anyway, can you give it to Google without nonfree software? I doubt it. Is there any accepted authentication app which is free software and runs on a free GNU/Linux system? The word "app" suggests that they run on nonfree snoopphone operating systems. As for hardware keys, in principle there could be one that is acceptable. I investigated the Yubikey some years ago and ISTR I found it requires nonfree software. Which option can people recommend? It sounds like there may be other options not listed. Is any of them acceptable? -- Dr Richard Stallman (https://stallman.org) Chief GNUisance of the GNU Project (https://gnu.org) Founder, Free Software Foundation (https://fsf.org) Internet Hall-of-Famer (https://internethalloffame.org)