Dear App Engine developers,

In the next release of App Engine you will notice that instead of being 
asked for a username and password, our SDKs will be defaulting to the more 
secure oAuth 2.0 web-based authentication flow to verify your identity. You 
can try this today using the --oauth2 flag with our appfg.py or appcfg.sh 
command line tools.

This change improves the security of your App Engine deployments as the 
oAuth 2.0 authentication flow supports additional Google account security 
features such as 2 Step Authentication 
<https://www.google.com/landing/2step/>. 

In a subsequent release we will be removing username and password 
authentication entirely.

We expect that most developers will be unaffected by this change, but as 
always we recommend early testing, particularly if you are using continuous 
integration or other tools to authenticate to App Engine. For any issues, 
you can find or ask for help on the Google App Engine Stack Overflow Tag 
<http://stackoverflow.com/questions/tagged/google-app-engine>, or if you 
have a support package you may open a support ticket 
<https://cloud.google.com/support/>. 

Happy (and secure) building!

Andrew, on behalf of the Google App Engine team

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/641d5e83-b172-4067-9ec5-2548cb03e982%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to