From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Stefan Monnier Newsgroups: gmane.emacs.devel Subject: Re: gmail+imap+smtp (oauth2) Date: Thu, 05 May 2022 15:13:44 -0400 Message-ID: References: <871qxbdulc.fsf@mat.ucm.es> <87k0b2tkg1.fsf@mat.ucm.es> <87zgjx4qhs.fsf@gmail.com> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="13688"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/29.0.50 (gnu/linux) Cc: Tim Cross , oub@mat.ucm.es, emacs-devel@gnu.org To: Richard Stallman Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Thu May 05 22:09:25 2022 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nmhmv-0003OB-4A for ged-emacs-devel@m.gmane-mx.org; Thu, 05 May 2022 22:09:25 +0200 Original-Received: from localhost ([::1]:51406 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nmhmu-0006Cf-28 for ged-emacs-devel@m.gmane-mx.org; Thu, 05 May 2022 16:09:24 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:53016) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nmgvA-0006uh-Dr for emacs-devel@gnu.org; Thu, 05 May 2022 15:13:54 -0400 Original-Received: from mailscanner.iro.umontreal.ca ([132.204.25.50]:58882) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nmgv7-0000JT-Fb; Thu, 05 May 2022 15:13:50 -0400 Original-Received: from pmg3.iro.umontreal.ca (localhost [127.0.0.1]) by pmg3.iro.umontreal.ca (Proxmox) with ESMTP id 1E0AB442759; Thu, 5 May 2022 15:13:47 -0400 (EDT) Original-Received: from mail01.iro.umontreal.ca (unknown [172.31.2.1]) by pmg3.iro.umontreal.ca (Proxmox) with ESMTP id AC750442756; Thu, 5 May 2022 15:13:45 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=iro.umontreal.ca; s=mail; t=1651778025; bh=Gg0i23nC9tGcWPSKHp214yE3LaBeonPk89sP1ibT37E=; h=From:To:Cc:Subject:References:Date:In-Reply-To:From; b=cRqfReyNBrnMK9AXqx/iMvT+aYhQQiaVxTGNrx/m4Gt5uYJpwDbgpK1SOaBGnbNy9 NV1dvrPaDn+GXgi/wdqdV2q4TS5kA/KkLHY9tSXy9thgdmzdD4isJPzuhezVbbQZFd de8Ld+guwdjldHG7k/JG14gSelzJ69Yl74HGXFN1fngXNReChU3DZVk9BpZ8Fy/PMW +PLOpUIZAweth6kIVUaNCg/kA05/tv43fvra0fDcygMOWTRmVc4ED/aVIkImZ3KqCe UGdNt8V1/7oECOaq1YQFFZHIBNoyUcoT9GQMPuNyqP4BkhS/Hys7j/uizr0IjOOOlM yPcJDiXPEQO5A== Original-Received: from alfajor (lechon.iro.umontreal.ca [132.204.27.242]) by mail01.iro.umontreal.ca (Postfix) with ESMTPSA id 9E99F1201A7; Thu, 5 May 2022 15:13:45 -0400 (EDT) In-Reply-To: (Richard Stallman's message of "Thu, 05 May 2022 14:37:01 -0400") Received-SPF: pass client-ip=132.204.25.50; envelope-from=monnier@iro.umontreal.ca; helo=mailscanner.iro.umontreal.ca X-Spam_score_int: -42 X-Spam_score: -4.3 X-Spam_bar: ---- X-Spam_report: (-4.3 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.io gmane.emacs.devel:289275 Archived-At: > Is there any accepted authentication app which is free software and > runs on a free GNU/Linux system? The word "app" suggests that they > run on nonfree snoopphone operating systems. Yes, what people often call "authentication app" is a misnomer which I resent (it's often accompanied with an application name or a link to it, suggesting that the software (typically proprietary, of course) is the one and only you can use). It really (usually) means the authentication uses the TOTP protocol, for which there are several Free Software implementations readily available. > As for hardware keys, in principle there could be one that is > acceptable. I investigated the Yubikey some years ago and ISTR I > found it requires nonfree software. Which option can people > recommend? AFAIK the Somu (and presumably other Solokeys) does not require any proprietary software. I'd be happy to hear confirmation from someone who actually dug into the matter, tho. Stefan