Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

"Wish not to seem, but to be, the best." -- Aeschylus


computers / comp.mobile.android / PSA There are now 3rd-party MUAs to recover from Google May 30th 2022 unilateral loss of privacy

SubjectAuthor
o PSA There are now 3rd-party MUAs to recover from Google May 30th 2022 unilateralAndy Burnelli

1
PSA There are now 3rd-party MUAs to recover from Google May 30th 2022 unilateral loss of privacy

<tbi16o$svk$1@gioia.aioe.org>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=33377&group=comp.mobile.android#33377

  copy link   Newsgroups: alt.comp.software.thunderbird comp.mobile.android alt.comp.os.windows-10
Path: i2pn2.org!i2pn.org!aioe.org!3PLzD/rb74ta/CXxNcmbeA.user.46.165.242.75.POSTED!not-for-mail
From: spa...@nospam.com (Andy Burnelli)
Newsgroups: alt.comp.software.thunderbird,comp.mobile.android,alt.comp.os.windows-10
Subject: PSA There are now 3rd-party MUAs to recover from Google May 30th 2022 unilateral loss of privacy
Date: Sun, 24 Jul 2022 00:45:57 +0100
Organization: Aioe.org NNTP Server
Message-ID: <tbi16o$svk$1@gioia.aioe.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Info: gioia.aioe.org; logging-data="29684"; posting-host="3PLzD/rb74ta/CXxNcmbeA.user.gioia.aioe.org"; mail-complaints-to="abuse@aioe.org";
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.6.1
X-Notice: Filtered by postfilter v. 0.9.2
Content-Language: en-GB
 by: Andy Burnelli - Sat, 23 Jul 2022 23:45 UTC

PSA There are now 3rd-party MUAs to recover from Google May 30th 2022
unilateral loss of privacy (due to deprecation of login/passwords)...
1. Fair Mail
2. K-9 Mail

As you are aware, on May 30th 2022 Google deprecated privacy in favor of
security - which caused many of us to scramble to recover from those
changes WITHOUT adding a mothership tracking account to Android, and
without being forced to use 2FA/2SV (e.g., app passwords or equivalent),
which trades privacy for security.
<https://i.postimg.cc/MGfN2Z7r/gmailpasswd01.jpg> Google May 30 nastigram
<https://i.postimg.cc/2yBvxJhJ/gmailpasswd02.jpg> Due to K9-Mail password
<https://i.postimg.cc/432zCNgx/gmailpasswd03.jpg> Win TB is set to OAuth2
<https://i.postimg.cc/MGs3HSyn/gmailpasswd04.jpg> As are some Android MUAs
<https://i.postimg.cc/cL9r9qFW/gmailpasswd05.jpg> Less secure app access
<https://i.postimg.cc/RhHkj4gJ/gmailpasswd06.jpg> TB imap & oauth settings

Given trading privacy for security is a bad bargain for most of us...

Today I was notified by the developer of Fair Mail that the developer of
K-9 Mail worked with him so that _both_ of them now authorize OAuth2 over
the web on Android (much like TB does on the PC).

Apparently Google loosened the annual audit requirement, but I'm not wholly
sure what changed in the interim between last week & this week's changes.

To be sure, there are a huge number of issues still outstanding (e.g.,
Google is limiting their token counts to such a low number as to be anti
competitive, which is affecting Fair Mail far more than K-9 Mail due to the
huge number of Google email users on Fair Mail compared to K-9 Mail), but
the PSA here is that Google "apparently" loosened the annual security audit
requirements for MUA developers so that Android can again authorize Google
email accounts WITHOUT creating a mothership tracking account on the
device.

This means that you don't need a mothership tracking account for OAuth2.
And it means that you don't need "app passwords" (which requires 2SV/2FA).

Best to get the 3rd-party MUAs from GitHub due to F-droid lagging behind.
*K-9 Mail* by K-9 Dog Walkers
Free, ad free, rated 3.1 stars, 96.3K reviews, 5M+ Downloads
<https://play.google.com/store/apps/details?id=com.fsck.k9>
Name: com.fsck.k9.apk
Size: 8103422 bytes (7913 KiB)
SHA256: 46F071F989C6A138C2B8835D7FCDFA902AE1697B6B3C1C16581EE34B42E51CC3

*GitHub*
<https://github.com/thundernest/k-9>
<https://github.com/thundernest/k-9/releases>
<https://github.com/thundernest/k-9/releases/download/6.201/k9-6.201.apk>
Name: k9-6.201.apk
Size: 8103232 bytes (7913 KiB)
SHA256: 53F6678B9CF065B2413A53F70BFBF56E2C9C42454DA1A4F37AEC6AD60AB9D53A

*Fair Mail* by Faircode.eu
<https://email.faircode.eu/>
<https://github.com/M66B/FairEmail>
<https://github.com/M66B/FairEmail/releases>
<https://github.com/M66B/FairEmail/releases/download/1.1940/FairEmail-v1.1940a-github-release.apk>
Name: FairEmail-v1.1940a-github-release.apk
Size: 26750634 bytes (25 MiB)
SHA256: DF1B41DD912B90F8F3B57E014C1EDA436FF0D0C89232E007E6DCDBB8B6800E6D

See also:
<https://github.com/M66B/FairEmail/blob/master/FAQ.md#user-content-faq173>
<https://github.com/M66B/FairEmail/blob/master/FAQ.md#user-content-faq147>
<https://github.com/M66B/FairEmail/blob/master/FAQ.md#user-content-faq111>
--
Posted out of the goodness of my heart to disseminate useful information.

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor