Re: [gentoo-user] Seamonkey automatic email download after switch to Oauth2

[Peter Humphrey <peter@prh.myzen.co.uk>]

On Friday, 3 June 2022 09:53:22 BST Michael wrote:
> On Friday, 3 June 2022 02:45:11 BST Dale wrote:
> > Howdy,
> > 
> > Early this morning Seamonkey could no longer fetch emails.  It wouldn't
> > accept the username and password.  I did some searching and it seems
> > that Google is disabling plain text username and password.  Honestly,
> > sounds like a good idea really.  During my searches, most recommended
> > OAuth2 so I switched to it.
> 
> Err ... perhaps not?  The use of a browser to delegate sign on is not
> necessarily a good idea, because it introduces layers of complication and
> with it potential vulnerabilities.  Random explainer here:
> 
> https://medium.com/securing/what-is-going-on-with-oauth-2-0-and-why-you-shou
> ld-not-use-it-for-authentication-5f47597b2611
> 
> I recall some IMAP4 devs complaining about it, but Google pushed on
> regardless.  From the end of May if you want to login to Gmail you have no
> option but to use OAuth2.  I expect this will break some users login if they
> have not disabled what Google calls "Less secure application access" and
> shared with Google their mobile phone number and what other *private*
> information Google wants to know, before it allows you to access your email
> messages.

Would a practical alternative be to have all gmail messages forwarded to 
another account? I haven't looked into this, but I have a gmail account, which 
perhaps I could set up to forward (relay?) all incoming mail to my Zen 
account.

-- 
Regards,
Peter.