Allowing less secure apps - "Goozilla" vs Mozilla

poma pomidorabelisima at gmail.com
Fri Feb 6 04:31:45 UTC 2015


On 06.02.2015 01:35, Tim wrote:
> Allegedly, on or about 05 February 2015, poma sent:
>> Therefore "Goozilla" considers Mozilla Thunderbird as less secure!?
>> Really "Goozilla"? 
> 
> This rather depends on *why* you're encountering this.  A great many
> applications logon to servers by sending your username and password,
> unencrypted.  Anyone else on the same network can see them.  By refusing
> unencrypted plain text logons, the server will be stopping your
> application before it sends out the password.  However, some dumb
> implementations of this protection don't interrupt the logon process,
> and fail you after the password has already been sent out, in the clear.
> 
> This issue has been around since the internet sprang into existence, yet
> even now it's a pain to get encrypted logons working, as little effort
> has been put into standardising them.  There's a plethora of different
> ways to do it, none of which can be considered a default, and not all
> methods will be supported on either side.
> 
> You do see, now, some applications attempting to do a secure logon as
> the first thing, instead, then falling back to other methods.
> 

Send Message Error

Sending of message failed.
The SMTP server smtp.gmail.com does not seem to support encrypted passwords. If you just set up this account, please try changing to 'Normal password' as the 'Authentication method' in the 'Account Settings | Server settings'. If it used to work and now suddenly fails, please contact your email administrator or provider.


$ dbus-monitor type=method_call | grep IMAP -B1
   string "Thunderbird"
   string "The IMAP server <Account Name> does not seem to support encrypted passwords. If you just set up this account, please try changing to 'Normal password' as the 'Authentication method' in the 'Account Settings | Server settings'. If it used to work and now suddenly fails, please contact your email administrator or provider."


Ref.
https://support.google.com/accounts/answer/6010255



More information about the users mailing list