From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.ciao.gmane.io!not-for-mail From: David Engster Newsgroups: gmane.emacs.bugs Subject: bug#41386: 28.0.50; Gnus nnimap OAuth 2.0 support Date: Fri, 22 May 2020 10:28:38 +0200 Message-ID: <87tv08idah.fsf@randomsample> References: <87y2poqehh.fsf@gnus.org> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="ciao.gmane.io:159.69.161.202"; logging-data="101071"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.91 (gnu/linux) Cc: Lars Ingebrigtsen , fitzsim@fitzsim.org, 41386@debbugs.gnu.org To: Richard Stallman Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Fri May 22 10:29:12 2020 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jc33I-000QA8-7c for geb-bug-gnu-emacs@m.gmane-mx.org; Fri, 22 May 2020 10:29:12 +0200 Original-Received: from localhost ([::1]:49330 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jc33H-000510-AK for geb-bug-gnu-emacs@m.gmane-mx.org; Fri, 22 May 2020 04:29:11 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:47238) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jc338-0004xn-8Q for bug-gnu-emacs@gnu.org; Fri, 22 May 2020 04:29:02 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]:46458) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1jc337-00028R-W2 for bug-gnu-emacs@gnu.org; Fri, 22 May 2020 04:29:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1jc337-0002X8-Sx for bug-gnu-emacs@gnu.org; Fri, 22 May 2020 04:29:01 -0400 X-Loop: help-debbugs@gnu.org Resent-From: David Engster Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Fri, 22 May 2020 08:29:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 41386 X-GNU-PR-Package: emacs Original-Received: via spool by 41386-submit@debbugs.gnu.org id=B41386.15901361279716 (code B ref 41386); Fri, 22 May 2020 08:29:01 +0000 Original-Received: (at 41386) by debbugs.gnu.org; 22 May 2020 08:28:47 +0000 Original-Received: from localhost ([127.0.0.1]:58004 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jc32t-0002Wd-Gs for submit@debbugs.gnu.org; Fri, 22 May 2020 04:28:47 -0400 Original-Received: from zplane.randomsample.de ([192.145.45.252]:53848) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jc32r-0002WP-LA for 41386@debbugs.gnu.org; Fri, 22 May 2020 04:28:46 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=randomsample.de; s=a; h=Content-Type:MIME-Version:Message-ID:Date: References:In-Reply-To:Subject:Cc:To:From:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=Iw8JvxPnSGHZ9yydXkokCrEXp+et/KnepLiVpNSwAIc=; b=bpC/llCqwOp7SEnqqn2OYue4L iFIRwotgo5ymH5BiUGdomvyvq7xmccGWWB6Old5FctY/Z8f4z/CPIhf9WhZYZqiUCU83Qol4ZjniR S7PiIntXah1OIHw8db1VKRQcCDlf8H5ueviG0FKS6tkEAUXetbMiewO236mYrga+KsRjy9EbQCvVT 0vZOfD4m01L/kEXHSCpXmh/mGC6K8wr3LGPWRDhOHhEbeaBZ6MaGwljXYu3mh6TVIwgUMW7HvKYH7 ArCjiocsJmjjTdWTtvRVvRlwNypjiFivcPnrflmTrvQA8KTs1jxM2gMaLisMSBAyLaYf1VAT5SclE wvNGFIHTg==; Original-Received: from ip5f5abaee.dynamic.kabel-deutschland.de ([95.90.186.238] helo=void) by zplane.randomsample.de with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jc32k-00059P-L4; Fri, 22 May 2020 10:28:38 +0200 In-Reply-To: (Richard Stallman's message of "Thu, 21 May 2020 23:07:24 -0400") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.io gmane.emacs.bugs:180738 Archived-At: > The two Google announcements clearly describe how Google plans to > block access with anything other than OAuth 2. They don't go into > much detail about what OAuth 2 requires, and don't describe how this > conflicts with free software. > > Can someone find a page describing this issue in a careful > and thorough way, written by someone who knows the subject? I've described the main issue in another mail in this bug thread. The problem is that Google's terms of service explicitly forbid to put client IDs into "open source projects". You can read their terms of service here: https://developers.google.com/terms Section 4b, paragraph 1: Developer credentials (such as passwords, keys, and client IDs) are intended to be used by you and identify your API Client. You will keep your credentials confidential and make reasonable efforts to prevent and discourage other API Clients from using your credentials. Developer credentials may not be embedded in open source projects. So for authors of (F)OSS non-web applications, this in effect makes it impossible to use OAuth2 with Google services if a client id/secret is required. The client id/secret is used to identify the application that is making the request. -David