https://bugs.kde.org/show_bug.cgi?id=354473

--- Comment #20 from george <[email protected]> ---
Created attachment 97918
  --> https://bugs.kde.org/attachment.cgi?id=97918&action=edit
kopete debug log using talk.google.com:5222, plaintext, no legacy SSL

Ok, I have tried again. Settings:

talk.google.com, port 5222, no legacy SSL

The result is the attached log. As soon as I try to go Online, Kopete asks me
for my password (although I have already entered it and remembered it in the
account options). I enter it and tick the "Remeber" checkbox again. I attempts
to login and again pops up asking for password. And so on to infinity.

BUT!

In the meantime I received an email on the Gmail account:
------
    Sign-in attempt prevented    

Hi SANITIZED,
Someone just tried to sign in to your Google Account [email protected] from
an app that doesn't meet modern security standards.
    Details:
Wednesday, March 16, 2016 12:27 AM
(LOCATION SANITIZED)*
We strongly recommend that you use a secure app, like Gmail, to access your
account. All apps made by Google meet these security standards. Using a less
secure app, on the other hand, could leave your account vulnerable. Learn more.

Google stopped this sign-in attempt, but you should review your recently used
devices:
------

Than I went to https://myaccount.google.com/security and saw the option Allow
less secure apps: OFF. I put it to ON and now I can connect. Put it back to OFF
and I cannot.

So it seems Kopete can connect only if using plaintext authentication and
reducing the overall security of the Google account. I definitely don't feel
safe doing this. Pidgin works with encryption turned on and without having to
"Allow less secure apps".

Can you fix that?

Also - how do I debug to debug if the situation with Telepathy is the same?
(which I suppose is quite possible) Maybe that might be worth a separate
ticket.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to