Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Oauth2 support for GMail

pmail.com

Post reply on HN
Print view View original

41–50 of 136 posts

Re: Oauth2 support for GMail

#42

Post by scrapheap »

lozenge wrote: post #30
corentin88 wrote: post #28

I believe many comments here will criticize Google. But objectively, Google is at its best here: - in terms of privacy, applications that have access to your Gmail inbox now require a security audit. - the audit is not required for MVP ( Of course, you have to pay for the audit. But: - it’s only required when you ask for restricted user data (i.e. reading my emails). - Google doesn’t take 30% of your revenue to use i…

Is it my inbox or Google's inbox?

If it's Gmail then it's Google's inbox, they're just letting you use it.

Re: Oauth2 support for GMail

#43

Post by dugmartin »

throwaway787544 wrote: post #39

Pegasus Mail, wow!!!! There's a blast from the past! I remember using this over 20 years ago!

We used it on our LAN around 1993 hooked to a local mail server (which ran on a Windows box using Netware I think - it was sitting on a filing cabinet next to my desk) that in turned fetched mail from the campus mail server. It worked really well and the local mail server let us easily share/email large attachments within the department as they never left the LAN.

Re: Oauth2 support for GMail

#45

Post by corentin88 »

jtbayly wrote: post #36
corentin88 wrote: post #28

I believe many comments here will criticize Google. But objectively, Google is at its best here: - in terms of privacy, applications that have access to your Gmail inbox now require a security audit. - the audit is not required for MVP ( Of course, you have to pay for the audit. But: - it’s only required when you ask for restricted user data (i.e. reading my emails). - Google doesn’t take 30% of your revenue to use i…

If you want to create a video, you’re one of the 17 developers in the world that does. Your criticism was completely unnecessary. It doesn’t say anything about the Pegasus dev except that he’s normal.

You _have_ to create a video. That’s a requirement. You don’t event have to talk or show your face on it though. I agree many people doesn’t like to record videos, I’m one of them, but you are a developer and your app is going to be available to 1.5 billion users of Gmail. Complaining about having to record a video (which is what Pegasus dev did) is not _normal_.

Re: Oauth2 support for GMail

#46

Post by NoGravitas »

rob74 wrote: post #8
acatton wrote: post #5

I'm confused… Why do they want to support the OAUTH flow when they can just the normal app password flow without any change in their code, just documentation for their users. https://support.google.com/accounts/answer/185833?hl=en

Maybe because the first line on the page you linked reads: > Tip: App Passwords aren’t recommended and are unnecessary in most cases. To help keep your account secure, use "Sign in with Google" to connect apps to your Google Account. So, for Google, App Passwords are clearly "second class citizens", deemed insecure and not recommended. And, as an app developer, you probably don't want to be seen as recommending an in…

This also strongly implies to me that Google is going to drop support for App Passwords in at most a few years.

Re: Oauth2 support for GMail

#47

Post by NickRandom »

I haven't seen a single comment (at time of posting this) touching on the cost aspect

The cost of the assessment typically varies between $10,000 -$75,000 (or more) depending on the size and complexity of the application

As he says, even if Google classed his as a small app (unlikely)

"Regrettably, these kinds of fees are far beyond what I can afford, given that I rely on donations from my users to make ends meet: even the $4,500 fee is well beyond what I could find on an annual basis. "

I get that doing proper auditing is expensive and the costs are within industry rates but to me it reeks of slowing turning the screws by boiling the frog on the slow path to monetization. (many mixed metaphors I know)

Post reply on HN