Re: gmail+imap+smtp (oauth2)

[Richard Stallman]

[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

  > Regardless of this "why", I think what it means is that it's perfectly
  > OK to use it in Free Software, with the "secret" key in plain sight.

  > I think from Google's point of view all it means is that we're more
  > prone to DoS attacks where someone abuses the "secret" key causing
  > Google to revoke the key.  Google won't suffer from it, we will, so they
  > don't care.

I think that is plausible.  However, the idea that these secret
application keys were designed for web dis-services, rather than for
programs you can install, seems plausible to me too.

Because a program and a service are fundamentally different, using a
single term (such as "app") for both of them creates devastating confusion.
When davmail was mentioned, I needed to know which one it was, and you
saw it was not easy to explain the question.

You can help educate people about ths difference.

-- 
Dr Richard Stallman (https://stallman.org)
Chief GNUisance of the GNU Project (https://gnu.org)
Founder, Free Software Foundation (https://fsf.org)
Internet Hall-of-Famer (https://internethalloffame.org)