News for hackers. Stuff that matters.

A comment on Google will disable all but OAuth for IMAP, SMTP and POP starting Sept. 30. Parent comment

Re:Google will disable all but OAuth for IMAP, SMTP and POP ... by jabart on Friday January 19, 2024 @08:46AM (#39055339)
It's not a password, it's an API Key. A GUID is 16 bytes represented as 36 characters with hypens but we consider those secure. Even Stripe's private keys are kinda short but their restricted keys are not.
[ Parent | on HN ]
Re:Google will disable all but OAuth for IMAP, SMTP and POP ... by Dylan16807 on Friday January 19, 2024 @04:29PM (#39061451)
> It's not a password, it's an API Key.

I don't see the difference.

> A GUID is 16 bytes represented as 36 characters with hypens but we consider those secure.

That's about twice as many bytes. That's an exponential difference in security.

[ Parent | on HN ]