OS/2, eCS & ArcaOS - Technical > Mail-News
How to use OAuth 2.0 on OS/2 SeaMonkey (or ThunderBird) to login to GMail?
Dave Yeo:
--- Quote from: Andi B. on June 16, 2022, 11:24:08 am ---
- SMS or phone call for every calendar/email login (beside overly uncomfortable I don't even think about giving this company my phone number voluntarily)
Seems this all is a new step from Google to force the world to use their software or leave their universe. I choice second.
--- End quote ---
Actually, here it is a SMS if using a new device. I had one SMS when I first used the app password, basically asking if it was me logging in.
OAuth 2.0 also did similar with Google verifying it was me, though I made multiple attempts to set up.
Andi B.:
--- Quote ---Actually, here it is a SMS...
--- End quote ---
I've read about you can add your devices to 'known secure ones' and then with these devices you wouldn't asked again (= loosing 2 factor authentication and what's the security benefit now?). Moreover this would need to give them one of my mobile numbers. Although SMS should work over conventional telephone network too, I'm pretty sure my provider don't support it.
--- Quote ---...I first used the app password...
--- End quote ---
Don't get me wrong but I think this is one of the problems I wanted to stress - some people (especially web amateurs) think, everyone has to have an Android phone. Often iPhones are tolerated too. Most of the time only the newest generations. But the world is bigger and more diverse than their horizon ;-).
Let me ask different - is there a way to setup SM/TB for google without using a special Android/iOS program AND without giving them a mobile number? As said, it is not so much important for me as gmail censors emails since a long time and so their service is useless for serious email communication anyway. But for the sake of having trash email addresses for potentially insecure web services gmail was good enough.
Dave Yeo:
--- Quote from: Andi B. on June 16, 2022, 04:23:12 pm ---
Let me ask different - is there a way to setup SM/TB for google without using a special Android/iOS program AND without giving them a mobile number? As said, it is not so much important for me as gmail censors emails since a long time and so their service is useless for serious email communication anyway. But for the sake of having trash email addresses for potentially insecure web services gmail was good enough.
--- End quote ---
I don't think so as at a minimum, they want to send you a SMS to verify it is you.
Unluckily, it is the way things are going, in the name of security.
The web mail interface does still work here, using the simplified version I believe. Not the best but for occasional use...
mauro:
--- Quote from: Dave Yeo on June 16, 2022, 04:01:50 pm ---
Actually, here it is a SMS if using a new device. I had one SMS when I first used the app password, basically asking if it was me logging in.
--- End quote ---
confirm this is my case as well. Received a phone SMS only once on my phone number at the registration moment to confirm the user identity, after that I could simply login by SM mail everytime with the application password (needless to digit, it is stored) , nothing else.
Andi B.:
--- Quote from: mauro on June 18, 2022, 08:36:09 pm ---
--- Quote from: Dave Yeo on June 16, 2022, 04:01:50 pm ---
Actually, here it is a SMS if using a new device. I had one SMS when I first used the app password, basically asking if it was me logging in.
--- End quote ---
confirm this is my case as well. Received a phone SMS only once on my phone number at the registration moment to confirm the user identity, after that I could simply login by SM mail everytime with the application password (needless to digit, it is stored) , nothing else.
--- End quote ---
So the whole action is for google to receive your current phone number (SMS). Where is the so called 'security improvement' if afterwards you log in via simple password then before?
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version