3 ms·

Hope you don't use Gmail through a custom or open source mail client

27 points by edward 4y ago

Tsiklon 4y ago
That assessment fee seems unnecessarily onerous and expensive. Is this an attempt to kill all but the largest mail clients off?
- Arnt 4y ago
  No, it's an attempt to block access via other servers. If you're a developer with an app that accesses a Google account: You can access your users' Google account from within client code running on their devices, keeping the data out of your reach. But the moment data from your users' Google account becomes accessible to you, Google's evil eye is on you. They don't want you to route the connection between their server and the user's device via your hardware, they don't want your code to forward any data from the Google account to your server.
square_usual 4y ago
Marcan (of asahi linux fame) points out that this is FUD: https://twitter.com/marcan42/status/1526800207215992833 https://twitter.com/marcan42/status/1526800207215992833 Here is the full text he's trying to quote, probably cut short because of twitter limits: Every app that requests access to restricted scope Google user's data and has the ability to access data from or through a third party server is required to go through a security assessment from Google empanelled security assessors. As for me, I think that the legalese they're using is very confusing. Most apps have "the ability to access data" from a third party server - I think they mean Google's data, but then they should've qualified it.
yakubin 4y ago
The URL should probably be changed to the linked post: <http://www.pmail.com/newsflash.htm http://www.pmail.com/newsflash.htm> The tweet adds nothing to the post. EDIT: Seems like OP already posted that link as well? <https://news.ycombinator.com/item?id=31420433 https://news.ycombinator.com/item?id=31420433> IMHO that's spam.
withinboredom 4y ago
So do I need a security assessment to use my own service for personal reasons? That’s begging for a lawsuit or possibly a GDPR violation.

27 points by edward 4y ago

That assessment fee seems unnecessarily onerous and expensive. Is this an attempt to kill all but the largest mail clients off?

Arnt 4y ago
No, it's an attempt to block access via other servers. If you're a developer with an app that accesses a Google account: You can access your users' Google account from within client code running on their devices, keeping the data out of your reach. But the moment data from your users' Google account becomes accessible to you, Google's evil eye is on you. They don't want you to route the connection between their server and the user's device via your hardware, they don't want your code to forward any data from the Google account to your server.

square_usual 4y ago

Marcan (of asahi linux fame) points out that this is FUD: https://twitter.com/marcan42/status/1526800207215992833 https://twitter.com/marcan42/status/1526800207215992833 Here is the full text he's trying to quote, probably cut short because of twitter limits: Every app that requests access to restricted scope Google user's data and has the ability to access data from or through a third party server is required to go through a security assessment from Google empanelled security assessors. As for me, I think that the legalese they're using is very confusing. Most apps have "the ability to access data" from a third party server - I think they mean Google's data, but then they should've qualified it.

yakubin 4y ago

The URL should probably be changed to the linked post: <http://www.pmail.com/newsflash.htm http://www.pmail.com/newsflash.htm> The tweet adds nothing to the post. EDIT: Seems like OP already posted that link as well? <https://news.ycombinator.com/item?id=31420433 https://news.ycombinator.com/item?id=31420433> IMHO that's spam.

withinboredom 4y ago

So do I need a security assessment to use my own service for personal reasons? That’s begging for a lawsuit or possibly a GDPR violation.