Re: Google Dropping "Less Secure Apps" for GMail May 30th 2022

[Brad Stone <bvstone@xxxxxxxxx>]

Also, from Google themselves:

----------------------------
"Tip: App Passwords aren’t recommended and are unnecessary in most cases.
To help keep your account secure, use "Sign in with Google" to connect apps
to your Google Account.

An App Password is a 16-digit passcode that gives a less secure app or
device permission to access your Google Account. App Passwords can only be
used with accounts that have 2-Step Verification turned on."
--------------------------

I can see why they offer this, though.  I mean, it would be a huge
disruption without some fallback to some sort of user/pw authentication.
It's most likely just one step closer to requiring OAuth 2.0.  It's also
meant for older devices that don't have OAuth 2.0 options.


On Fri, Mar 4, 2022 at 11:35 AM Brad Stone <bvstone@xxxxxxxxx> wrote:

> Yep, that's an option too.  It's a little work to get it set up and not
> really any more secure than using user/pw, except for the 2FA required to
> set it up.
>
>
>
> On Fri, Mar 4, 2022 at 11:17 AM Richard Schoen <richard@xxxxxxxxxxxxxxxxx>
> wrote:
>
> > I believe they have to enable 2FA and then get an app password to
> > connect.
> >
> > But that also means authenticating with that app password for any
> > SMTP/POP/IMAP interactions from what I've been doing.
> >
> > Regards,
> > Richard Schoen
> > Web: http://www.richardschoen.net
> > Email: richard@xxxxxxxxxxxxxxxxx
> > ------------------------------
> >
> > message: 4
> > date: Fri, 4 Mar 2022 10:15:22 -0600
> > from: Brad Stone <bvstone@xxxxxxxxx>
> > subject: Google Dropping "Less Secure Apps" for GMail May 30th 2022
> >
> > I just got this today and wanted to pass it on to those sending email
> > from their IBM i using an @gmail.com account.
> >
> > https://support.google.com/accounts/answer/6010255?hl=en
> >
> > This doesn't apply to Google Workspace accounts using your own domain.
> > But, I have a feeling in the future it may.  (I would have thought maybe
> > they would have done workspace first as it has to be less accounts to test
> > the waters... oh well!)
> >
> > I have a lot of customers using @gmail.com accounts to send email from
> > their IBM i, and I am sure there are more out there using open source, 3rd
> > party, or home grown solutions that do the same.  So, just a heads up.
> >
> > <vendor>
> > yes, we have a workaround, but that's not the main reason for this post..
> > just to let folks know! I know a lot of shops email from the IBM i with
> > gmail accounts.  I posted more info on my Linked In account and will be
> > sending a newsletter to my customers to alert them specifically.
> > </vendor>
> >
> > Bradley V. Stone
> > www.bvstools.com
> > Native IBM i e-Mail solutions for Microsoft Office 365, Gmail, or any
> > Cloud Provider!
> >
> > --
> > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> > list
> > To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at https://archive.midrange.com/midrange-l.
> >
> > Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> > questions.
> >
> > Help support midrange.com by shopping at amazon.com with our affiliate
> > link: https://amazon.midrange.com