[Alpine-info] OAUTH Profile for Open Public Clients
Andrew C Aitchison via Alpine-info
alpine-info at u.washington.edu
Thu Jul 11 14:26:22 PDT 2024
There is a new ietf draft intended as a public way for mail clients and
servers to interoperate when using OAUTH, written by Neil Jenkins of
fastmail:
https://www.ietf.org/archive/id/draft-jenkins-oauth-public-00.html
Currently Alpine have had to code the details of Microsoft, Google and
Yahoo OAuth authentication separately, which does not scale.
This draft is intended to allow any MTA to use OAUTH with any MUA.
--
For those of you who can access the mailop list, Brandon Long of GMail
explained some use cases where he considers OAUTH more secure than plain
IMAP. These don't sound like the sort of scenarios where alpine would be
used, but may be ones that GMail have to worry about:
https://list.mailop.org/private/mailop/2024-July/028714.html
--
Andrew C. Aitchison Kendal, UK
andrew at aitchison.me.uk
More information about the Alpine-info
mailing list