Re: [Fetchmail-users] Planned Google authentication changes

[Matthias A. <mat...@gm...>]

Am 21.03.22 um 16:24 schrieb Héctor Abreu:
>>> IIRC I had to enable "use less secure" in gmail for it to work with
>>> fetchmail.  Perhaps  I was just in a hurry then and lazy now?
>>>
>> Yes, that switch used to be there. Not sure how long it will last.
>
>   I just read in my Google Settings (Security section) that the "Less secure
> app access" will no longer be available starting on May 30th, 2022. Does
> this mean that my only option to continue using Fetchmail to read emails
> sent to my GMail Inbox is to forward them to another email service?
>
>> Or just go find a service that does not scan all your email and forces YOU to change.
> Is there any Fetchmail friendly email service that you or anyone in this
> list can recommend? I think I'm having 2 different problems now: One is
> Oath2 (which to me it looks like an inconvenient trend, but I read it can
> be fixed through patches) and the other problem is that soon no "Less
> secure app access" will be allowed in Google anymore.

Whatever that means. Any service that provides free password-based
TLS-encrypted access through IMAP or POP3 will work.

Fetchmail is NOT a "less secure app", that's just fear, uncertainty,
doubt, spread by some of these service providers such as Google or
whoever else has adopted such libel, who want to extend their control
over the Internet. I say that because usually for OAuth2 support, some
form of registering applications is part of the provider's approach, and
that is just not something what we made IETF standards such as IMAP for.

Now OAuth2 may also be specified, but it a holey standard, with lots of
options on the provider's end, which somewhat reminds me of
https://xkcd.com/927/

So vote with your feet and stop using such services such as gmail.

Some services may offer app-specific passwords that users can generate
for a certain part of such a provider's service.

I have heard people speak good things of posteo.de and mailbox.org, both
expect 1 EUR per month payments and have security and privacy in their
mission statement.