Re: how to use fetchmail with MS Office 365 / davmail?

From	Celejar <celejar@gmail.com>
Newsgroups	linux.debian.user
Subject	Re: how to use fetchmail with MS Office 365 / davmail?
Date	2021-04-30 15:30 +0200
Message-ID	<C9Bns-7Zn-7@gated-at.bofh.it> (permalink)
References	(1 earlier) <C93OO-4CE-1@gated-at.bofh.it> <C98Y9-85b-3@gated-at.bofh.it> <C99rc-8ew-3@gated-at.bofh.it> <C9dO9-2qJ-11@gated-at.bofh.it> <C9eAy-2VB-13@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Thu, 29 Apr 2021 14:03:37 +0100
Darac Marjal <mailinglist@darac.org.uk> wrote:

> 
> On 29/04/2021 13:11, Eric S Fraga wrote:
> > Dystopian is right.  Our organization, using O365, has moved to
> > "multi-factor authentication" without consultation and I can no longer
> > use gnus, for instance.  Absolutely horrible.
> 
> Ask your administrator to enable "Per Application Passwords" -
> https://docs.microsoft.com/en-us/azure/active-directory/user-help/multi-factor-authentication-end-user-app-passwords
> 
> The idea here is that, if a human is logging in, they still provide two
> factors (something they know and something they have) via the TOTP
> mechanism. But for automated access, where an application is logging in
> on behalf of that user, the user generates a long one-off password ONLY
> for that application. This works a bit like an API key - password #1 is
> for gnus on laptop 1, password #2 is for Fetchmail on laptop 1, password
> #3 is for gnus on laptop 2 and so on. Each instance of an application
> gets its own long password.
> 
> It's ostensibly more secure than storing the user's password in that
> application because:
> 
> * Per-App passwords are computer-generated. They can be tested for high
> entropy and regenerated instantaneously, before a "good" password is
> offered to the user. (I don't know whether this is actually done, or
> whether it's just the output of a pRNG password generator)
> 
> * Per-App passwords can be revoked without spoiling access to other
> applications. Did laptop 2 get stolen? Just revoke password #3 and you
> don't need to change the passwords stored on Laptop 1.

I've been looking into this recently, and I think there's a third, very
important but subtle reason why 2FA + application specific passwords
are (or at least can be) more secure than the classic password model:
the application specific password can be limited to grant permission to
access the account *data*, but will not grant permission to alter
account settings, so the account cannot be totally hijacked the way it
can be with classic passwords if they ever get compromised.

Celejar

Thread

how to use fetchmail with MS Office 365 / davmail? Gregor Zattler <telegraph@gmx.net> - 2021-04-28 20:30 +0200
  Re: how to use fetchmail with MS Office 365 / davmail? Kushal Kumaran <kushal@locationd.net> - 2021-04-29 03:40 +0200
    Re: how to use fetchmail with MS Office 365 / davmail? deloptes <deloptes@gmail.com> - 2021-04-29 09:10 +0200
      Re: how to use fetchmail with MS Office 365 / davmail? <tomas@tuxteam.de> - 2021-04-29 09:40 +0200
        Re: how to use fetchmail with MS Office 365 / davmail? Eric S Fraga <e.fraga@ucl.ac.uk> - 2021-04-29 14:20 +0200
          Re: how to use fetchmail with MS Office 365 / davmail? <tomas@tuxteam.de> - 2021-04-29 14:30 +0200
            Re: how to use fetchmail with MS Office 365 / davmail? tomas@tuxteam.de - 2021-04-29 14:40 +0200
              Re: how to use fetchmail with MS Office 365 / davmail? tomas@tuxteam.de - 2021-04-29 16:30 +0200
            Re: how to use fetchmail with MS Office 365 / davmail? Greg Wooledge <greg@wooledge.org> - 2021-04-29 15:10 +0200
              Re: how to use fetchmail with MS Office 365 / davmail? Eric S Fraga <e.fraga@ucl.ac.uk> - 2021-04-29 15:20 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? <tomas@tuxteam.de> - 2021-04-29 16:50 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? tomas@tuxteam.de - 2021-04-29 17:50 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Joe <joe@jretrading.com> - 2021-04-29 21:40 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? <tomas@tuxteam.de> - 2021-04-29 21:50 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? deloptes <deloptes@gmail.com> - 2021-04-30 02:30 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? <tomas@tuxteam.de> - 2021-04-30 08:50 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? deloptes <deloptes@gmail.com> - 2021-04-30 15:30 +0200
                Free vs proprietary [was: how to use fetchmail with MS Office 365 /  davmail?] <tomas@tuxteam.de> - 2021-04-30 16:20 +0200
                Re: Free vs proprietary [was: how to use fetchmail with MS Office 365 / davmail?] deloptes <deloptes@gmail.com> - 2021-04-30 22:20 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Joe <joe@jretrading.com> - 2021-04-30 10:20 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? <tomas@tuxteam.de> - 2021-04-30 10:40 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Joe <joe@jretrading.com> - 2021-04-30 12:40 +0200
              Re: how to use fetchmail with MS Office 365 / davmail? <tomas@tuxteam.de> - 2021-04-29 16:50 +0200
            Re: how to use fetchmail with MS Office 365 / davmail? Brian <ad44@cityscape.co.uk> - 2021-04-29 21:50 +0200
              Re: how to use fetchmail with MS Office 365 / davmail? <tomas@tuxteam.de> - 2021-04-29 21:50 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Brian <ad44@cityscape.co.uk> - 2021-04-29 23:50 +0200
              Re: how to use fetchmail with MS Office 365 / davmail? Joe <joe@jretrading.com> - 2021-04-30 10:10 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Brian <ad44@cityscape.co.uk> - 2021-04-30 21:50 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Joe <joe@jretrading.com> - 2021-04-30 22:20 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? deloptes <deloptes@gmail.com> - 2021-05-01 09:30 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Joe <joe@jretrading.com> - 2021-05-01 10:30 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Weaver <weaver@riseup.net> - 2021-05-01 10:40 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? deloptes <deloptes@gmail.com> - 2021-05-01 12:10 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Joe <joe@jretrading.com> - 2021-05-01 17:50 +0200
                [Off-topic] When in Rome... <tomas@tuxteam.de> - 2021-05-01 18:00 +0200
                Re: [Off-topic] When in Rome... deloptes <deloptes@gmail.com> - 2021-05-01 19:10 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Ángel <debian-user@debian.16bits.net> - 2021-05-03 01:50 +0200
                OT Reading brainwaves [was: how to use fetchmail with MS Office 365  / davmail?] <tomas@tuxteam.de> - 2021-05-03 09:10 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-04-30 23:30 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Joe <joe@jretrading.com> - 2021-05-01 09:40 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? <tomas@tuxteam.de> - 2021-05-01 10:20 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Andrei POPESCU <andreimpopescu@gmail.com> - 2021-05-03 10:30 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Eric S Fraga <e.fraga@ucl.ac.uk> - 2021-05-03 16:10 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? rhkramer@gmail.com - 2021-05-04 19:10 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? David Wright <deblis@lionunicorn.co.uk> - 2021-05-03 16:50 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Dan Ritter <dsr@randomstring.org> - 2021-05-03 17:30 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-05-03 18:30 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? <tomas@tuxteam.de> - 2021-05-03 18:40 +0200
                [OFFTOPIC] Re: how to use fetchmail with MS Office 365 / davmail? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-05-03 19:00 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? David Wright <deblis@lionunicorn.co.uk> - 2021-05-03 21:40 +0200
                [OFFTOPIC] Re: how to use fetchmail with MS Office 365 / davmail? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-05-03 21:50 +0200
                Re: [OFFTOPIC] Re: how to use fetchmail with MS Office 365 / davmail? Brian <ad44@cityscape.co.uk> - 2021-05-03 22:10 +0200
                Re: [OFFTOPIC] Re: how to use fetchmail with MS Office 365 /  davmail? Joe <joe@jretrading.com> - 2021-05-03 22:40 +0200
                Re: [OFFTOPIC] Re: how to use fetchmail with MS Office 365 / davmail? David Wright <deblis@lionunicorn.co.uk> - 2021-05-04 18:10 +0200
                Re: [OFFTOPIC] Re: how to use fetchmail with MS Office 365 / davmail? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-05-04 18:40 +0200
            Re: how to use fetchmail with MS Office 365 / davmail? Andrei POPESCU <andreimpopescu@gmail.com> - 2021-05-01 09:10 +0200
              Re: how to use fetchmail with MS Office 365 / davmail? <tomas@tuxteam.de> - 2021-05-01 10:30 +0200
          Re: how to use fetchmail with MS Office 365 / davmail? Darac Marjal <mailinglist@darac.org.uk> - 2021-04-29 15:10 +0200
            Re: how to use fetchmail with MS Office 365 / davmail? Eric S Fraga <e.fraga@ucl.ac.uk> - 2021-04-29 15:30 +0200
            Re: how to use fetchmail with MS Office 365 / davmail? deloptes <deloptes@gmail.com> - 2021-04-29 21:20 +0200
              Re: how to use fetchmail with MS Office 365 / davmail? Eric S Fraga <e.fraga@ucl.ac.uk> - 2021-05-27 15:20 +0200
            Re: how to use fetchmail with MS Office 365 / davmail? Celejar <celejar@gmail.com> - 2021-04-30 15:30 +0200
          Re: how to use fetchmail with MS Office 365 / davmail? Erwan David <erwan@rail.eu.org> - 2021-04-29 15:20 +0200
            Re: how to use fetchmail with MS Office 365 / davmail? Eric S Fraga <e.fraga@ucl.ac.uk> - 2021-04-29 15:50 +0200
              Re: how to use fetchmail with MS Office 365 / davmail? Michael Grant <mgrant@grant.org> - 2021-04-29 16:40 +0200
                Re: how to use fetchmail with MS Office 365 /          davmail? Linux-Fan <Ma_Sys.ma@web.de> - 2021-04-29 19:00 +0200
                Re: how to use fetchmail with MS Office 365 / davmail? Kushal Kumaran <kushal@locationd.net> - 2021-04-30 05:20 +0200
                Re: how to use fetchmail with MS Office 365 /          davmail? Linux-Fan <Ma_Sys.ma@web.de> - 2021-04-30 18:30 +0200
  Re: how to use fetchmail with MS Office 365 / davmail? Jonathan Siegle <jsiegle@psu.edu> - 2021-04-29 14:40 +0200
    Re: how to use fetchmail with MS Office 365 / davmail? <tomas@tuxteam.de> - 2021-04-29 14:50 +0200
    Re: how to use fetchmail with MS Office 365 / davmail? Eric S Fraga <e.fraga@ucl.ac.uk> - 2021-05-27 15:30 +0200

csiph-web