From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/88906 Path: news.gmane.org!.POSTED.blaine.gmane.org!not-for-mail From: David Engster Newsgroups: gmane.emacs.gnus.general Subject: Re: oauth to be required for gmail Date: Wed, 18 Dec 2019 08:07:53 +0100 Message-ID: <87tv5yxgae.fsf@randomsample> References: <8736dkhx05.fsf@bobnewell.net> <877e2uvpve.fsf@gnus.org> Mime-Version: 1.0 Content-Type: text/plain Injection-Info: blaine.gmane.org; posting-host="blaine.gmane.org:195.159.176.226"; logging-data="16078"; mail-complaints-to="usenet@blaine.gmane.org" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) Cc: Robert Pluim , Bob Newell , ding@gnus.org To: Lars Ingebrigtsen Original-X-From: ding-owner+M37109@lists.math.uh.edu Wed Dec 18 08:08:52 2019 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from lists1.math.uh.edu ([129.7.128.208]) by blaine.gmane.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from ) id 1ihTRz-00040J-UP for ding-account@gmane.org; Wed, 18 Dec 2019 08:08:52 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by lists1.math.uh.edu with smtp (Exim 4.92.3) (envelope-from ) id 1ihTRT-00067a-RP; Wed, 18 Dec 2019 01:08:19 -0600 Original-Received: from mx2.math.uh.edu ([129.7.128.33]) by lists1.math.uh.edu with esmtps (TLSv1.3:TLS_AES_256_GCM_SHA384:256) (Exim 4.92.3) (envelope-from ) id 1ihTRQ-00064q-Qt for ding@lists.math.uh.edu; Wed, 18 Dec 2019 01:08:16 -0600 Original-Received: from quimby.gnus.org ([95.216.78.240]) by mx2.math.uh.edu with esmtps (TLSv1.3:TLS_AES_256_GCM_SHA384:256) (Exim 4.92.3) (envelope-from ) id 1ihTRP-0007Cd-2Q for ding@lists.math.uh.edu; Wed, 18 Dec 2019 01:08:16 -0600 Original-Received: from randomsample.de ([5.45.97.173]) by quimby.gnus.org with esmtps (TLS1.2:DHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.92) (envelope-from ) id 1ihTRI-0003NQ-GI; Wed, 18 Dec 2019 08:08:10 +0100 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=randomsample.de; s=a; h=Content-Type:MIME-Version:Message-ID:Date:References:In-Reply-To:Subject:Cc:To:From; bh=ITgD5iJYGpNqlQ3km/+fig8fSQX510s2mZj+sfTVNm0=; b=IYhtLUP3jKqcrnw7hQxo835p2wreuKw6M7FZc5dvYR5L7evQ7PfGWYHIXWyavhN8mZ52IgWc/Hn7VjVh5mqn2dn3TcXrZ1zsgGIBHvFPXhNw+W3eMty+0HdbKz7o6en0; Original-Received: from ip5f5abab0.dynamic.kabel-deutschland.de ([95.90.186.176] helo=void) by randomsample.de with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.80) (envelope-from ) id 1ihTRH-0000y4-Et; Wed, 18 Dec 2019 08:08:07 +0100 In-Reply-To: <877e2uvpve.fsf@gnus.org> (Lars Ingebrigtsen's message of "Tue, 17 Dec 2019 18:11:33 +0100") List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:88906 Archived-At: > I don't think this is much of an option for Gnus? Gnus Inc registering > an app that's allowed to access Gmail accounts? I'd have to go through > a security audit process (typically costing $50K, if I understand > correctly) and, still, it's pretty much impossible as the secret key > would have to be distributed some way, wouldn't it? Or... is that a > solved problem? So I wondered: How does Thunderbird does it? Oh, there are the ID's and secrets: https://dxr.mozilla.org/comm-central/source/comm/mailnews/base/util/OAuth2Providers.jsm But it seems if you put a comment above it which says "Don't copy these values for your own application--register it yourself", then it's fine. This whole OAuth2 stuff is ridiculous. -David