MozillaZine

Thunderbird And GMail

Discussion of general topics about Mozilla Thunderbird
viveksuraiya

User avatar
 
Posts: 4
Joined: February 27th, 2008, 11:36 pm

Post Posted April 25th, 2019, 1:39 am

Why is Thunderbird considered a 'less secure' app for GMail access?

DanRaisch
Moderator

User avatar
 
Posts: 121849
Joined: September 23rd, 2004, 8:57 pm
Location: Somewhere on the right coast

Post Posted April 25th, 2019, 4:09 am

Because they want to push their Oauth security model. That really brings nothing significantly more secure but ties people more closely to Google.

makaiguy

User avatar
 
Posts: 16771
Joined: November 18th, 2002, 6:44 pm
Location: Somewhere in SE USA

Post Posted April 25th, 2019, 7:13 am

Google (and now Yahoo and perhaps others) have gone to Google's OAuth2 protocol for email authentication. Despite their labeling other protocols as "less secure", OAuth2 is really no more secure* than more traditional methods (sending username and password), but does provide them some internal benefits in that it allows you to use your Google or Yahoo account to log into other sites like Facebook, Microsoft, Twitter, etc.

You can set your Thunderbird to use the Oauth2 authentication if you choose via the "Authentication method" item under Server Settings.

Or, you can tell Google/Yahoo to accept traditional non-Oauth2 authentication methods by logging into your Google/Yahoo account using a web browser and going to your Security settings. Enable "Allow apps that use less secure sign in".

* In fact, OAuth2 may well be LESS secure than traditional methods. See: https://en.wikipedia.org/wiki/OAuth#Security
Doug Wilson, "The Makai Guy"
Win10 (64bit): FF Quantum 69.0 (64bit), TB 60.8.0 (32-bit) ║ Android 8.0/7.1.1: FF Mobile 68.0.2
No TB for Android available, dammit!
What a fool believes he sees, no wise man has the power to reason away - Doobie Brothers

tomdkat
 
Posts: 1328
Joined: October 14th, 2003, 7:53 am

Post Posted May 12th, 2019, 1:00 pm

makaiguy wrote:You can set your Thunderbird to use the Oauth2 authentication if you choose via the "Authentication method" item under Server Settings.

Does this apply only to IMAP?

Thanks!

Peace...

DanRaisch
Moderator

User avatar
 
Posts: 121849
Joined: September 23rd, 2004, 8:57 pm
Location: Somewhere on the right coast

Post Posted May 12th, 2019, 1:10 pm

No.

Return to Thunderbird General


Who is online

Users browsing this forum: No registered users and 1 guest