Groups > alt.comp.software.thunderbird > #5628

Re: Windows Thunderbird OAuth2 works for Google Accounts - but what for Android/iOS?

From	Andy Burnelli <spam@nospam.com>
Newsgroups	alt.comp.software.thunderbird, alt.comp.microsoft.windows, alt.comp.os.windows-10
Subject	Re: Windows Thunderbird OAuth2 works for Google Accounts - but what for Android/iOS?
Date	2022-07-13 14:52 +0100
Organization	Aioe.org NNTP Server
Message-ID	<tamimd$1dlh$1@gioia.aioe.org> (permalink)
References	<t8qp8b$1ue7$1@gioia.aioe.org> <jj790nFkgifU1@mid.individual.net>

Cross-posted to 3 groups.

Show all headers | View raw

Andy Burns wrote:

>> Given all of us use Thunderbird on the PC (on this newsgroup anyway), which
>> can handle the Google Account OAuth2 without 2FA/2SV, what MUA do you
>> recommend on your mobile device that does not require 2FA/2SF and which
>> supports OAuth2?
> 
> I see that the latest K9 has added oAuth2 support, I've not tried it yet.

Thanks for keeping us in the loop, as you always knew a lot more than I did
(and ever will) about the insecurities inherent in OAUth2 (via that video).

Since I, like you, always try to be helpful to the group at large, you can
see my comments and any responses to them at the bottom of Martin
Brinkman's article over here from a few days ago when "gym" gave this link.
 <https://www.ghacks.net/2022/07/08/k-9-mail-future-thunderbird-for-android-adds-oauth-2-0-support/>

Unfortunately, as expected, K-9 themselves likely can't afford the yearly
Google-required Audit so K-9 with OAuth2 support _creates_ a Google Account
on your phone (just like FairMail did, and whose developer told me why they
_hated_ that they had to do that, but Google is insistent and that's that).

The developer even quit the project because of this murdering of privacy by
Google, but then he was talked back into it (read the XDA thread he wrote).

Luckily, Mozilla _does_ appear to pay for the yearly Google-required audit
or Thunderbird would also be creating a Google Account on your computer.

That means maybe Mozilla will pay for that yearly audit for the Android
version they finally come out with - but - there's NOTHING about that in
any Mozilla press release that I've seen yet. Have you?

Bear in mind you can't have privacy on an iPhone because the iPhone
requires a mothership tracking account (to be functional) but you _can_
have the privacy you want on Android because it does NOT require a
mothership account (to be functional).

Having said that you can't have privacy from the mothership if you set up
the phone with a mothership account, I am well aware most people are sheep
led to slaughter when it comes to setting up a computing device.

That means most people won't even _notice_ this additional loss of privacy,
because most people _already_ lost that critical piece of privacy.
-- 
Before the iKooks fabricate that the iPhone is "functional" without a
mothership tracking account, I will pre-empt their fabrications of
imaginary functionality by stating clearly we're not talking about
jailbreaking/rooting and we're not talking about temporary clusterfuck
tricks that can onkly install an app for only a couple of days.

Thread

csiph-web