From: Felipe Contreras <felipe.contreras@gmail.com>
Date: Fri, 04 Jun 2021 01:11:45 GMT
Subject: Re: Gmail OAuth2 in git send-email
Message-ID: <60b97dd1acd9d_3a18272087b@natae.notmuch>
In-Reply-To: <CAPig+cS74Ah3OyJPNQhvkdV6f7mkFgFQjHgfrrAE1gZsvN38RA@mail.gmail.com>

Eric Sunshine wrote:
> Google requires 2fa to be enabled in order to create app passwords,

That doesn't make sense.

It's like complaining that you need to lose a limb in order to use
prostetics...

App passwords are a suboptimal solution in case you cannot use 2fa for a
certain application.

If you cannot use 2fa for any application, then don't enable 2fa, and
then you don't need an app password. Just use your regular password.

> > And of course you don't need them for the second step authentication
> > either, you can use any OTP client:
> >
> >   https://github.com/paolostivanin/OTPClient
> 
> Thanks, that's an interesting bit of information, though if a person
> can't enable 2fa in the first place, then... (intentionally left
> blank)

All you need to enable 2fa is demonstrate that you can *use* 2fa... So
you need an OTP client.

Cheers.

-- 
Felipe Contreras