56 lines
2.1 KiB
Plaintext
56 lines
2.1 KiB
Plaintext
MBOX-Line: From David.Harris at pmail.gen.nz Wed Apr 30 18:34:10 2014
|
|
To: imap-protocol@u.washington.edu
|
|
From: David Harris <David.Harris@pmail.gen.nz>
|
|
Date: Fri Jun 8 12:34:52 2018
|
|
Subject: [Imap-protocol] OAUTH and IMAP
|
|
In-Reply-To: <53611968.6010707@verizon.net>
|
|
References: <53608FE7.8090909@verizon.net>,
|
|
<CABa8R6sJQ0SV5O_udOusA983vE5NNbuRt27VthkCPuMbAge2yA@mail.gmail.com>,
|
|
<53611968.6010707@verizon.net>
|
|
Message-ID: <5361A492.27040.8E4360E0@David.Harris.pmail.gen.nz>
|
|
|
|
Tyro alert! Sorry to be thick here - I'll try to keep it brief.
|
|
|
|
On 30 Apr 2014 at 10:40, Joshua Cranmer wrote:
|
|
|
|
> My suggestion, which I think got misunderstood, was that instead of
|
|
> relying on a pre-registration mechanism for the client ID, IMAP clients
|
|
> should be able to construct a client ID somehow from the IMAP ID that
|
|
> they send out. I didn't intend to imply that the client ID should be
|
|
> extracted by the server from observing an IMAP ID on the transaction.
|
|
|
|
Could you explain what "IMAP ID" you're talking about here? Is this
|
|
something specific to the OAUTH2 specification, or has some kind of ID
|
|
been added to post-RFC3501 IMAP while I was asleep?
|
|
|
|
Secondly, could someone send me a link showing the intended use of
|
|
OAUTH in an IMAP implementation? Am I correct in assuming that you are
|
|
intended to submit a user's GMail short-term token to login to GMail instead
|
|
of using a username/password or other SASL mechanism?
|
|
|
|
Finally, could someone comment on how real any of this is? The Wikipedia
|
|
article on OAUTH (I know, I know - Wikipedia is Wikipedia, but it's useful
|
|
despite all its shortcomings) paints a picture of a vague, fractured,
|
|
poorly-designed mechanism being torn apart by internal bickering and
|
|
infighting.
|
|
|
|
http://en.wikipedia.org/wiki/OAuth
|
|
|
|
Links to overview sources that could help bring me up to speed on the broad
|
|
issues would be gratefully received.
|
|
|
|
Cheers!
|
|
|
|
-- David --
|
|
|
|
------------------ David Harris -+- Pegasus Mail ----------------------
|
|
Box 5451, Dunedin, New Zealand | e-mail: David.Harris@pmail.gen.nz
|
|
Phone: +64 3 453-6880 | Fax: +64 3 453-6612
|
|
|
|
Thought for the day:
|
|
A penny saved is ridiculous.
|
|
|
|
|
|
|
|
|