From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.ciao.gmane.io!not-for-mail From: Thomas Fitzsimmons Newsgroups: gmane.emacs.bugs Subject: bug#41386: 28.0.50; Gnus nnimap OAuth 2.0 support Date: Tue, 19 May 2020 11:37:46 -0400 Message-ID: References: <87y2poqehh.fsf@gnus.org> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: ciao.gmane.io; posting-host="ciao.gmane.io:159.69.161.202"; logging-data="25814"; mail-complaints-to="usenet@ciao.gmane.io" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (gnu/linux) Cc: 41386@debbugs.gnu.org To: Lars Ingebrigtsen Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Tue May 19 17:41:13 2020 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1jb4Mi-0006c2-RJ for geb-bug-gnu-emacs@m.gmane-mx.org; Tue, 19 May 2020 17:41:12 +0200 Original-Received: from localhost ([::1]:40190 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jb4Mh-0001qS-Ss for geb-bug-gnu-emacs@m.gmane-mx.org; Tue, 19 May 2020 11:41:11 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]:51092) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jb4Kc-0006fU-B9 for bug-gnu-emacs@gnu.org; Tue, 19 May 2020 11:39:02 -0400 Original-Received: from debbugs.gnu.org ([209.51.188.43]:39206) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1jb4Kc-0005Oh-1G for bug-gnu-emacs@gnu.org; Tue, 19 May 2020 11:39:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1jb4Kb-0006HR-Un for bug-gnu-emacs@gnu.org; Tue, 19 May 2020 11:39:01 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Thomas Fitzsimmons Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 19 May 2020 15:39:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 41386 X-GNU-PR-Package: emacs Original-Received: via spool by 41386-submit@debbugs.gnu.org id=B41386.158990268224063 (code B ref 41386); Tue, 19 May 2020 15:39:01 +0000 Original-Received: (at 41386) by debbugs.gnu.org; 19 May 2020 15:38:02 +0000 Original-Received: from localhost ([127.0.0.1]:50752 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jb4JX-0006Fj-9w for submit@debbugs.gnu.org; Tue, 19 May 2020 11:38:01 -0400 Original-Received: from mail-qt1-f181.google.com ([209.85.160.181]:41344) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jb4JV-0006FW-Rz for 41386@debbugs.gnu.org; Tue, 19 May 2020 11:37:54 -0400 Original-Received: by mail-qt1-f181.google.com with SMTP id m44so11473345qtm.8 for <41386@debbugs.gnu.org>; Tue, 19 May 2020 08:37:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fitzsim-org.20150623.gappssmtp.com; s=20150623; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=Gf4Mp3H0zLzTJLLya/u5/mpGRrY3Ofert83JQbaQ/YY=; b=aNS4x4UZxu1t6AvvJc2wMEqkNHeEmSmhyssGnC3UU8bOUXMUSIqr5BOPpYVyf6Mp9N Uhr0Xq0dw4sWOhWL8AqYRdPxAU/mXYNWwDQKfXUBlULZ2hmVF3W9PgTUjqZypP3BXp62 Njyp5N2uv0JY2+KJjzvE4TGqVZ8VhbKEamCvuX9rBjmtWOv4GEc36IxcTu+9bCv9VfaT WExHXmIbYY/wJI8EsAirNQ6SssMLMKvHHnILf4+hdcJ2g8uD1HboTdDdCYpOETQArr8y 71ktZYvWK3PS8kEz78SiG2hmxoM9wKBnhZ8hHaUYBh0kwTJqNYl0zQDsuQBOo6s2TeDz Ew/Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=Gf4Mp3H0zLzTJLLya/u5/mpGRrY3Ofert83JQbaQ/YY=; b=PXgrbYKejjld1CSixWCF/Y6FkFwBLhNSmguM11B4Gj2Z2zsw/S5AnLKo2xzsSfKaIy C+yqYAF+oAiK3/PyZLxH+zG8AzJ7ME7qwmLltKt54QN9glhQiB3+kI+/kPqumekOp27d 7W0KeFpPboN+njDM6z6lAb7bcjCe1RzqK9AeaE+tisDCJmG5yAIqL31h0/Pj8z4wMrWy MVJUj0p/F7hIJoF2r9DHpPAI90QirDfrIUiJtoyXYR7crkmxALilRT7nDjg3heryYBIL ZT0dr1ETFERWP4CB3u8It86gpWuunvmMMlH1q3apS3/7jLZVYV2Wox+rP13Zd9fXjtGb fZeA== X-Gm-Message-State: AOAM531r4DyPyX+Z26euHEidEb74P4kLnSI7Fz1xIEyDk3ZextbAnWZ9 cVork1Jjf2Cu4uauARgi/4ibkLsMtlIHNw== X-Google-Smtp-Source: ABdhPJwTK0t9oQ7h+98YDlN5GEPDTeXD3Ev4iPI83bziIcEsv/1M86bNDFbZT6uM6Au3P91PTnDjhA== X-Received: by 2002:aed:24a8:: with SMTP id t37mr272652qtc.199.1589902667606; Tue, 19 May 2020 08:37:47 -0700 (PDT) Original-Received: from localhost.localdomain (69-165-165-189.dsl.teksavvy.com. [69.165.165.189]) by smtp.gmail.com with ESMTPSA id i5sm435qtp.66.2020.05.19.08.37.46 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 19 May 2020 08:37:47 -0700 (PDT) In-Reply-To: <87y2poqehh.fsf@gnus.org> (Lars Ingebrigtsen's message of "Tue, 19 May 2020 14:46:34 +0200") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.io gmane.emacs.bugs:180602 Archived-At: Lars Ingebrigtsen writes: > Thomas Fitzsimmons writes: > >> Is support for OAuth 2.0 -- perhaps via oauth2.el available in GNU ELPA >> -- something that Gnus could eventually implement? If so, I guess this >> bug report could be where the idea is discussed. > > I don't think there's any way to ship Emacs with built-in oauth2 support > for doing auth with Gmail -- it requires distributions with API secrets > and stuff, and there's no secrets in the Emacs distribution. > > Or is there a way to do that now? I haven't been paying attention the > last few months. I remember Thunderbird including some credentials in > the source code and saying, jokily, "remember, these are secret". > Somebody would have to register the Emacs "app" with Google, and for > Emacs, that would have to be the FSF, right? And I don't see that > happening ever, ideologically. I suppose it depends on what Google wants during the registration process; I've never tried this registration process before so I don't know what's involved. Maybe someone from the FSF could research this? Maybe a solution could be found for Free Software like Emacs. Thunderbird is mentioned as a not-less-secure-app, so they seem to have solved this problem to Thunderbird/Google's satisfaction. According to communications I've received for my Google "G Suite" email service, Google plans to change these "less secure app" policies such that next year they won't allow Gnus to connect using username/password authentication like it does today. > But somebody could definitely write a package and put that on MELPA, and > do the registration, I think? (With the same joke, of course.) OK, maybe Google could relax the secrecy requirement for Emacs though, since I'd hope they'd be sufficiently Free-Software-friendly to work something out. I assume, given what Thunderbird is doing, that the secrecy requirement isn't something fundamental to OAuth 2.0's security. Thomas