Live data from Hacker News

Turning off less-secure app access to G Suite accounts

gsuiteupdates.googleblog.com

1–10 of 37 posts

Re: Turning off less-secure app access to G Suite accounts

#3
Does mutt support oauth yet? If not, this will be the last straw for G Suite from me. I can sort-of understand turning off "less secure" apps in consumer Gmail, but forcing "security" requirements for private, paid enterprise accounts is ludicrous. Time to find a provider which treats me as a grown-up capable of independent security risk judgement.

Re: Turning off less-secure app access to G Suite accounts

#4
post #3

Does mutt support oauth yet? If not, this will be the last straw for G Suite from me. I can sort-of understand turning off "less secure" apps in consumer Gmail, but forcing "security" requirements for private, paid enterprise accounts is ludicrous. Time to find a provider which treats me as a grown-up capable of independent security risk judgement.

Yes. This was my initial concern, but it looks like it's a simple process of running a script:

https://luxing.im/mutt-integration-with-gmail-using-oauth/

Re: Turning off less-secure app access to G Suite accounts

#5
This seems like a transparently disingenuous way to further platform lock-in using security as a pretext. I question the level of "security" this provides, especially given that there's little difference on the client side from using an app-specific password and using an OAuth2 bearer token, except the latter is more annoying to acquire and use. Either way, it's a small blob of text managed via Gsuite that the user has to have on their device and that an attacker could steal.

Re: Turning off less-secure app access to G Suite accounts

#7
post #3

Does mutt support oauth yet? If not, this will be the last straw for G Suite from me. I can sort-of understand turning off "less secure" apps in consumer Gmail, but forcing "security" requirements for private, paid enterprise accounts is ludicrous. Time to find a provider which treats me as a grown-up capable of independent security risk judgement.

Are there any decent alternatives to G Suite that support out of the box email hosting?

Re: Turning off less-secure app access to G Suite accounts

#8
post #7
post #3

Does mutt support oauth yet? If not, this will be the last straw for G Suite from me. I can sort-of understand turning off "less secure" apps in consumer Gmail, but forcing "security" requirements for private, paid enterprise accounts is ludicrous. Time to find a provider which treats me as a grown-up capable of independent security risk judgement.

Are there any decent alternatives to G Suite that support out of the box email hosting?

plenty. https://lmgtfy.com/?q=email+hosting+providers

fastmail.fm seems well regarded. (it's not on the first page of results above)

Re: Turning off less-secure app access to G Suite accounts

#9
post #7
post #3

Does mutt support oauth yet? If not, this will be the last straw for G Suite from me. I can sort-of understand turning off "less secure" apps in consumer Gmail, but forcing "security" requirements for private, paid enterprise accounts is ludicrous. Time to find a provider which treats me as a grown-up capable of independent security risk judgement.

Are there any decent alternatives to G Suite that support out of the box email hosting?

For email you can import your gmail account via IMAP to fastmail. I have a custom domain so it's been awesome to finally serve mail from it and a relatively painless transition.

Re: Turning off less-secure app access to G Suite accounts

#10
post #2

This change will prevent us from using a large number of open source apps, effectively locking us into Google's own tools. My org will be eyeing alternatives when this rolls out.

That's surprising, it's an open standard that plenty of open source apps do implement, isn't it? Is it just that the apps you're using happen to not have support for it?

Which apps are you using that you wouldn't be able to use?

Post reply on HN