Re: Gmail OAuth2 in git send-email

From: Eric Sunshine <sunshine@sunshineco.com>
Date: Jun 3, 2021, 23:35 UTC
Message-ID: <CAPig+cS74Ah3OyJPNQhvkdV6f7mkFgFQjHgfrrAE1gZsvN38RA@mail.gmail.com>
In-Reply-To: <60b928374d90e_39cbe920835@natae.notmuch>

On Thu, Jun 3, 2021 at 3:06 PM Felipe Contreras <felipe.contreras@gmail.com> wrote:

Show 7 quoted lines

> Eric Sunshine wrote:
> > The 2fa requirement is a problem for those of us who don't have
> > smartphones or SMS.
>
> You don't need either of those with an app password:
>
>   https://support.google.com/mail/answer/185833/sign-in-using-app-passwords

Google requires 2fa to be enabled in order to create app passwords, and to enable 2fa requires a phone or a physical security device, so I'm afraid I don't see how your suggestion is supposed to work for people lacking such devices.

> And of course you don't need them for the second step authentication
> either, you can use any OTP client:
>
>   https://github.com/paolostivanin/OTPClient

Thanks, that's an interesting bit of information, though if a person can't enable 2fa in the first place, then... (intentionally left blank)