Re: the great Gmail ERR [AUTH] therad

Neil R. Ormos <[email protected]> wrote:
> Charles Cazabon wrote:
> 
> > Overall, it would be much simpler -- it's really easy, just a few clicks
> > -- for you to enable 2FA on your Google account and set an app password to
> > use with getmail.
> 
> > It literally is a 10-second task.
> 
> The problem is that I do not want the effects of turning on Google's
> Two-Step Verification. 
> 
> In particular, I don't want my access to Gmail or anything else to be
> dependent on Google's capricious verification challenges that require me to
> have a phone that is charged, active on a WLAN or mobile network, and within
> physical reach, with absolutely no recourse if the phone is not available.

You don't actually need connectivity; they support standard TOTP, so you can
install any authenticator app (not just Google's) and it will work, without
'net access.  You do still need a device -- any device, not just a phone --
for authentication, of course.  Well, technically you could actually do this
with a calculator or pencil and paper if you're that desperate :)

But this does seem kind of academic.  If you do not have a working computer,
phone, tablet or other electronic device with working internet access ... what
exactly would you be doing that would require you to interact with Google's
authentication demands?  Are you using IP over avian carrier?

Note: I am not trying to justify Google's policies, procedures, or
applications.  Just trying to help.

> Another problem with reliance on app passwords is that if the user changes
> their Google account password, all the app passwords are invalidated. 

Yes, but that was also the case with using your login password for email.
<shrug />

Charles
-- 
-----------------------------------------------------------------------
Charles Cazabon
GPL'ed software available at:               http://pyropus.ca/software/
-----------------------------------------------------------------------