From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.ciao.gmane.io!not-for-mail From: Lars Ingebrigtsen Newsgroups: gmane.emacs.bugs Subject: bug#41386: 28.0.50; Gnus nnimap OAuth 2.0 support Date: Tue, 19 May 2020 18:12:43 +0200 Message-ID: <87v9krq4xw.fsf@gnus.org> References: <87y2poqehh.fsf@gnus.org> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="ciao.gmane.io:159.69.161.202"; logging-data="38735"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (gnu/linux) Cc: 41386@debbugs.gnu.org To: Thomas Fitzsimmons Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Tue May 19 18:13:11 2020 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jb4re-0009yC-K8 for geb-bug-gnu-emacs@m.gmane-mx.org; Tue, 19 May 2020 18:13:10 +0200 Original-Received: from localhost ([::1]:47040 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jb4rd-0001ks-JX for geb-bug-gnu-emacs@m.gmane-mx.org; Tue, 19 May 2020 12:13:09 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:55700) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jb4rW-0001kb-Rd for bug-gnu-emacs@gnu.org; Tue, 19 May 2020 12:13:02 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]:39221) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1jb4rV-0005PP-P4 for bug-gnu-emacs@gnu.org; Tue, 19 May 2020 12:13:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1jb4rV-0007AW-JH for bug-gnu-emacs@gnu.org; Tue, 19 May 2020 12:13:01 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Lars Ingebrigtsen Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 19 May 2020 16:13:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 41386 X-GNU-PR-Package: emacs Original-Received: via spool by 41386-submit@debbugs.gnu.org id=B41386.158990477527543 (code B ref 41386); Tue, 19 May 2020 16:13:01 +0000 Original-Received: (at 41386) by debbugs.gnu.org; 19 May 2020 16:12:55 +0000 Original-Received: from localhost ([127.0.0.1]:50767 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jb4rP-0007AB-1x for submit@debbugs.gnu.org; Tue, 19 May 2020 12:12:55 -0400 Original-Received: from quimby.gnus.org ([95.216.78.240]:56604) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jb4rN-00079w-BE for 41386@debbugs.gnu.org; Tue, 19 May 2020 12:12:54 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Content-Type:MIME-Version:Message-ID:In-Reply-To:Date: References:Subject:Cc:To:From:Sender:Reply-To:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=lVA7wXaF/s+1S3ac3V0kmVABpuq2SWUTNLf0gRKuURs=; b=bpjRr/6eLCwajfDZkRM6A3xd7C iiyM0kt+FwCJ+l5uLJCbf3TbMHj58pFO/vvcpHl0TtzyzZgl3yTfEdbDEz7+kjle+blYIluZmHVTt IyKnXhULdB9XrACZ+oi2CK/uPOBN1TK0oHSk6+7vEni6GREGbnt+RVzLcCXF+9vWyQRM=; Original-Received: from cm-84.212.202.86.getinternet.no ([84.212.202.86] helo=marnie) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jb4rE-0003KF-1M; Tue, 19 May 2020 18:12:46 +0200 In-Reply-To: (Thomas Fitzsimmons's message of "Tue, 19 May 2020 11:37:46 -0400") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.io gmane.emacs.bugs:180604 Archived-At: Thomas Fitzsimmons writes: > I suppose it depends on what Google wants during the registration > process; I've never tried this registration process before so I don't > know what's involved. You register a developer account (with your name and address and stuff), and you then register an application. Everybody connecting to Gmail will use this application ID, so you are "responsible" in some degree for the users of your application. Rate-limiting, for instance, are based on the application ID. > OK, maybe Google could relax the secrecy requirement for Emacs though, > since I'd hope they'd be sufficiently Free-Software-friendly to work > something out. I assume, given what Thunderbird is doing, that the > secrecy requirement isn't something fundamental to OAuth 2.0's security. It is. OAuth login without secrets isn't any more secure than normal user name/password logins, so making apps run through these hoops is just obfuscation. It's obvious what Google's end game here is: They will stop IMAP access altogether to Gmail as soon as they are able to without losing too many of the users. This OAuth 2.0 stuff is just a sop they can point people towards while they're closing off access to their walled garden: "See! We're still open!" And people bite. Some hackernews commented something like "I don't see why people are complaining... they just have to run a script..." The only solution here is to leave Gmail. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no