3 ms·
I'm confused… Why do they want to support the OAUTH flow when they can just the normal app password flow without any change in their code, just documentation fo
by acatton 4y ago
I'm confused… Why do they want to support the OAUTH flow when they can just the normal app password flow without any change in their code, just documentation for their users.
https://support.google.com/accounts/answer/185833?hl=en https://support.google.com/accounts/answer/185833?hl=en
- rob74 4y agoMaybe because the first line on the page you linked reads: > Tip: App Passwords aren’t recommended and are unnecessary in most cases. To help keep your account secure, use "Sign in with Google" to connect apps to your Google Account. So, for Google, App Passwords are clearly "second class citizens", deemed insecure and not recommended. And, as an app developer, you probably don't want to be seen as recommending an insecure authentication method?
- baisq 4y agoI assume that users of Pegasus Mail are advanced enough to know that that is bullshit.
- NoGravitas 4y agoThis also strongly implies to me that Google is going to drop support for App Passwords in at most a few years.
- kevincox 4y agoThe OAuth flow is better. It is easier for users and supports many more methods of authentication. Really the biggest downside about the OAuth flow is that it requires a relationship with Google (a client key). If this could be a fully decentralized standard it would be fantastic.
- sneak 4y agoIf you have advanced protection enabled on your Google Account (and you should) then app passwords are no longer available.