From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/88900 Path: news.gmane.org!.POSTED.blaine.gmane.org!not-for-mail From: Lars Ingebrigtsen Newsgroups: gmane.emacs.gnus.general Subject: Re: oauth to be required for gmail Date: Tue, 17 Dec 2019 18:11:33 +0100 Message-ID: <877e2uvpve.fsf@gnus.org> References: <8736dkhx05.fsf@bobnewell.net> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: blaine.gmane.org; posting-host="blaine.gmane.org:195.159.176.226"; logging-data="131336"; mail-complaints-to="usenet@blaine.gmane.org" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) Cc: Bob Newell , ding@gnus.org To: Robert Pluim Original-X-From: ding-owner+M37103@lists.math.uh.edu Tue Dec 17 18:12:28 2019 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from lists1.math.uh.edu ([129.7.128.208]) by blaine.gmane.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1ihGOY-000XtW-9i for ding-account@gmane.org; Tue, 17 Dec 2019 18:12:26 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by lists1.math.uh.edu with smtp (Exim 4.92.3) (envelope-from ) id 1ihGNt-0007np-RZ; Tue, 17 Dec 2019 11:11:45 -0600 Original-Received: from mx2.math.uh.edu ([129.7.128.33]) by lists1.math.uh.edu with esmtps (TLSv1.3:TLS_AES_256_GCM_SHA384:256) (Exim 4.92.3) (envelope-from ) id 1ihGNq-0007l0-PO for ding@lists.math.uh.edu; Tue, 17 Dec 2019 11:11:42 -0600 Original-Received: from quimby.gnus.org ([95.216.78.240]) by mx2.math.uh.edu with esmtps (TLSv1.3:TLS_AES_256_GCM_SHA384:256) (Exim 4.92.3) (envelope-from ) id 1ihGNo-0002td-Sx for ding@lists.math.uh.edu; Tue, 17 Dec 2019 11:11:42 -0600 Original-Received: from cm-84.212.202.86.getinternet.no ([84.212.202.86] helo=marnie) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1ihGNi-0001TT-Ca; Tue, 17 Dec 2019 18:11:36 +0100 In-Reply-To: (Robert Pluim's message of "Tue, 17 Dec 2019 09:03:53 +0100") List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:88900 Archived-At: Robert Pluim writes: > I think the canonical package for doing this is > , although I haven't > tried it yet. It's comically convoluted to use oauth for open source software: https://github.com/ccrusius/auth-source-xoauth2/blob/8cef77b0d390f8a45e7690eaf8772173e1995a9b/auth-source-xoauth2.el#L79 Here's a recipe for Mutt, which one Hackernews described as "you just have to run a script": https://luxing.im/mutt-integration-with-gmail-using-oauth/ Now, what closed source software does is do all the first steps for you: Register an app on Google, get a secret key etc, so all the user has to do it go through a web-based login thing. I don't think this is much of an option for Gnus? Gnus Inc registering an app that's allowed to access Gmail accounts? I'd have to go through a security audit process (typically costing $50K, if I understand correctly) and, still, it's pretty much impossible as the secret key would have to be distributed some way, wouldn't it? Or... is that a solved problem? -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no