On 2016-10-11 03:40, Philip Whitehouse wrote:
On 2016-10-11 03:29, Sean Greenslade wrote:
On Mon, Oct 10, 2016 at 07:18:36PM -0700, William Boozer wrote:
Yesterday I logged in to my yahoo mail from a desktop... And it said
that someone was trying to access my account from an unauthorized
source or something to that effect... So I selected what it
recommended... Now my K-9 Mail is no longer working... What do I need
to do to get it back operable
Contact Yahoo? Perhaps you need to reset your password, or re-enable
IMAP, or something of that nature. All Yahoo problems, not really
anything to do with K-9.
Actually in this case we might be able to do something. However it'll
take some time and I'm not a big fan of Yahoo right now for several
reasons:
1. The state sponsored hack
2. The search of all emails without notifying their own security team
3. They aren't advertising the authentication method their own app
uses in the IMAP capabilities.
4. They've changed it overnight, with no effort made to contact popular
apps.
Anyway, I'm going to request information to see if we can get K-9 to
support whatever their 'more-secure' system is. If it's similar to
Google's XOAUTH2 it might land in the next stable release subject to
testing - depending on how easy it is to request a token. (I've got a
PR for Google's XOAUTH 2 (their 'more-secure', documented method). If
not it will depend on the complexity - though I have a test account
and recently improved the testing in this area of code..
For now you can enable 'less-secure' apps. Personally I consider Yahoo
itself to be the least secure bit in this scenario regardless.
Additional:
1. POP is now deprecated. So if you are using POP then you'll want to
migrate. I expect the automatic set-up will be updated sooner or later.
2. From the debug on IMAP, it is XOAUTH2 which I've written code for
Google accounts. However, because it's not a Google account, it'll need
some extra work in how the tokens are obtained. I will look into this
during this week.
Depending on how complex that bit is (hopefully not too bad) it should
make it into an upcoming stable release and an unstable release once the
current pending bugs are fixed.
https://github.com/k9mail/k-9/issues/1698
All of this is quite annoying because I was spending my free time trying
to get S/MIME to work, which obviously is less important to me than my
accounts all connecting.
- Philip Whitehouse
--
You received this message because you are subscribed to the Google Groups "K-9
Mail" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
