{"thread":{"id":"42134","subject":"[git send-email] Less secure?","startedAt":"2016-04-24T20:54:52Z","lastAt":"2016-04-24T22:36:57Z","messageCount":2,"participants":["Neven Sajko","Eric Wong"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"284366","messageId":"CAL+bK4Ms5WLSiWEPhXOX2i5T9UdcaZyD+kaTZpVsd0NZBts+7A@mail.gmail.com","threadId":"42134","inReplyTo":null,"subject":"[git send-email] Less secure?","fromName":"Neven Sajko","fromEmail":"nsajko@gmail.com","sentAt":"2016-04-24T20:54:52Z","receivedAt":"2016-04-24T20:54:52Z","isPatch":false,"sender":{"key":"nsajko@gmail.com","avatar":null},"body":"Gmail by default doesn't allow usage through send-email.\nThey say that send-email is \"less secure\" and that enabling it\nmakes it easier to break into my account.\n\nIs send-email really less secure than the Gmail web browser\ninterface?\n\n\nNeven\n"},{"id":"284369","messageId":"20160424223657.GA25762@dcvr.yhbt.net","threadId":"42134","inReplyTo":"CAL+bK4Ms5WLSiWEPhXOX2i5T9UdcaZyD+kaTZpVsd0NZBts+7A@mail.gmail.com","subject":"Re: [git send-email] Less secure?","fromName":"Eric Wong","fromEmail":"normalperson@yhbt.net","sentAt":"2016-04-24T22:36:57Z","receivedAt":"2016-04-24T22:36:57Z","isPatch":false,"sender":{"key":"e@80x24.org","avatar":null},"body":"Neven Sajko <nsajko@gmail.com> wrote:\n> Gmail by default doesn't allow usage through send-email.\n> They say that send-email is \"less secure\" and that enabling it\n> makes it easier to break into my account.\n> \n> Is send-email really less secure than the Gmail web browser\n> interface?\n\nLike any email client, git send-email is only as secure as your\nown practices.  It can use git's native git-credential system\nfor handling passwords.\n\nAccording to the following post from Javier, you will need\nan extra password if you have two-factor auth enabled with Gmail:\n\nhttp://mid.gmane.org/CALZVapn9KjXCpO+zaYuB6RSnG747u4a7e_m_HDg+uH-uz8UhQg@mail.gmail.com\n\nAdditionally, since (AFAIK) you can still get multiple Gmail\naccounts, there's no reason you need to use your primary email\naccount (that might be tied to your private/personal life)\nfor sending patches to a public mailing list.\n\n\nDisclaimer: I have little experience with Gmail myself and do\nnot endorse Google (or any corporation).  I just care deeply\nabout the continued existence of vendor-neutral messaging.\n"}]}