> Edit: Next logical step is auditing every IMAP client before you can connect it to Gmail. Ridiculous. Actually .... They're not that far away from that, if t

> Edit: Next logical step is auditing every IMAP client before you can connect it to Gmail. Ridiculous. Actually .... They're not that far away from that, if they're not already implementing it. Office365, and Google, if they haven't already have disabled basic Auth for IMAP/SMTP, and only supporting oauth2. Which requires a AppId/ClientSecret handed out out by registering your app with Microsoft/Google. It seems that you can still steal thunderbirds appid/clientsecret from their open source code, for now ( https://simondobson.org/2024/02/03/getting-email/ https://simondobson.org/2024/02/03/getting-email/ ) , but ......