News for hackers. Stuff that matters.

A comment on Google will disable all but OAuth for IMAP, SMTP and POP starting Sept. 30. Parent comment

Re:Google will disable all but OAuth for IMAP, SMTP and POP ... by ojosilva on Friday January 19, 2024 @08:05AM (#39054957)
I just hope that Gmail itself (as client) becomes something other than a Less Secure App. Right now I have to keep that LSA switch going so that my main Gmail account can SMTP send mail with credentials from my other many Gmail accounts. I've never understood why Gmail itself is a LSA in the eyes of other Gmail accounts.
[ Parent | on HN ]
Re:Google will disable all but OAuth for IMAP, SMTP and POP ... by Arnt on Friday January 19, 2024 @09:44AM (#39056052)
I don't know why it is that, but I know why it was that at one time, quite long ago: One team had set terms for what avoids LSAness, another team hadn't updated some code to match the new terms.
[ Parent | on HN ]
Re:Google will disable all but OAuth for IMAP, SMTP and POP ... by chimeracoder on Friday January 19, 2024 @10:28AM (#39056650)
> I've never understood why Gmail itself is a LSA in the eyes of other Gmail accounts.

Because Google isn't special-casing itself (which is a good thing).

You can enable 2FA on the other accounts and then use app-specific passwords, which will allow you to disable the switch.

[ Parent | on HN ]