Adding a new authentication method that obeys a spec is not actually that complex in terms of the amount of code I think. Certainly the code the the existing authentication methods is quite small in comparison.
The real issue is trying to test against an actual mail server to verify the functionality. Producing the expected message in response to the challenge in the spec is one thing but verifying it really works is another. There is an outstanding issue for supporting XOAuth which is likely to happen because it's used by Gmail so a developer can just create a Gmail account to test against. XOAuth is actually a bit more complex too because it's a token not the password so there's probably some UX work in getting that token. Basically, yes, I'm sure a PR would be accepted but without a server to test against its more difficult. If you know one that supports it and has free sign up then that makes it more likely to happen. The RFCs mention GSS-API - that's probably more complex still. I might see with my mail provider what settings I can auth my IMAP account by. Anyone know what other mail clients support here (I guess Thunderbird supports everything - Gmail and iOS?) On 27 March 2016 21:37:02 BST, Curtis Villamizar <[email protected]> wrote: >Any chance SCRAM (Salted Challenge Response Authentication Mechanism - >RFC >7677, RFC 5802) could be supported in the near future? > >This is the simplest non-obsolete SASL method that supports mutual >authentication and is a big improvement over CRAM-MD5. >See >http://www.iana.org/assignments/sasl-mechanisms/sasl-mechanisms.xhtml > >The supported authentications (PLAIN and CRAM-MD5) are very weak and >provide only one way authentication. >Even SCRAM-SHA1 is a big improvement over CRAM-MD5. > >Curtis > > > >-- >-- >You received this message because you are subscribed to the K-9 Mail >Users List. >To post to this group, send email to [email protected] >To unsubscribe, email [email protected] >To report an issue with K-9 Mail, visit >http://code.google.com/p/k9mail/issues/list >For more options, visit this group at >http://groups.google.com/group/k-9-mail > >--- >You received this message because you are subscribed to the Google >Groups "K-9 Mail" group. >To unsubscribe from this group and stop receiving emails from it, send >an email to [email protected]. >For more options, visit https://groups.google.com/d/optout. Best regards Philip Whitehouse -- -- You received this message because you are subscribed to the K-9 Mail Users List. To post to this group, send email to [email protected] To unsubscribe, email [email protected] To report an issue with K-9 Mail, visit http://code.google.com/p/k9mail/issues/list For more options, visit this group at http://groups.google.com/group/k-9-mail --- You received this message because you are subscribed to the Google Groups "K-9 Mail" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
