• OAUTH2 itercept at Yahoo

    From Adam H. Kerman@ahk@chinet.com to comp.mail.pine on Wed Sep 30 18:41:48 2026
    From Newsgroup: comp.mail.pine

    Three times this week, attemptiing to check my Yahoo inbox via IMAP,
    I've gotten the OAUTH2 intercept screen and I've dutifully stored the
    offered code in the passfile.

    I assume this isn't a client issue.

    Is this effectively the same as an app password? IMAP simply submits it
    as part of my credentials, right?

    OAUTH2 is a needlessly complicated way to solve a problem that an app
    password did with a lot less fuss, and I've read plenty of criticism of
    the actual security it provides.
    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Adam H. Kerman@ahk@chinet.com to comp.mail.pine on Wed Sep 30 22:34:12 2026
    From Newsgroup: comp.mail.pine

    Adam H. Kerman <ahk@chinet.com> wrote:

    Three times this week, attemptiing to check my Yahoo inbox via IMAP,
    I've gotten the OAUTH2 intercept screen and I've dutifully stored the
    offered code in the passfile.

    I assume this isn't a client issue.

    Is this effectively the same as an app password? IMAP simply submits it
    as part of my credentials, right?

    OAUTH2 is a needlessly complicated way to solve a problem that an app >password did with a lot less fuss, and I've read plenty of criticism of
    the actual security it provides.

    This time, I ignored it, which I should have done the other three times.
    Trying IMAP some time later, no OAUTH2 nag and IMAP was performed.
    --- Synchronet 3.22a-Linux NewsLink 1.2