Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-12-29 Thread David Green
On 31 May 2019, at 6:16, Benny Kjær Nielsen wrote: I've finally passed the verification process for the Google OAuth API.  Do you know how this verification relates to Google Advanced Protection Program (https://landing.google.com/advancedprotection/)? I am assuming MailMate won’t work

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-06-02 Thread Annamarie Pluhar
Ugh. It’s not working for me. My gmail spins and spins and then i get unauthorized. But MM is an authorized app. I’ve gone into those settings at google. I could reinstall the account? I have many smart mailboxes. Ugh. Thoughts ? Annamarie Annamarie Pluhar @sharinghousing Author: Sharing

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-31 Thread Patrik Fältström via mailmate
Excellent news! Thanks! Patrik On 31 May 2019, at 12:16, Benny Kjær Nielsen wrote: > Hi MailMate users, > > a couple of updates on the subjects I wrote about a month ago. > > First some very good news: I've finally passed the verification process for > the Google OAuth API. It has been a

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-31 Thread Benny Kjær Nielsen
Hi MailMate users, a couple of updates on the subjects I wrote about a month ago. First some very good news: I've finally passed the verification process for the Google OAuth API. It has been a bit frustrating and involved weird steps including making a YouTube video essentially showing that

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-08 Thread Verdon Vaillancourt
Our university IT actually stopped support the use of desktop email clients a while ago, with the only “official” way to access email being the Gmail in a browser. That's shockingly bad for any organization, but especially a university, in my view. Sadly not uncommon.

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-08 Thread Randall Gellens
Our university IT actually stopped support the use of desktop email clients a while ago, with the only “official” way to access email being the Gmail in a browser. That's shockingly bad for any organization, but especially a university, in my view. --Randall

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-08 Thread Dave C
“Unofficially” (c; you can have your Gmail mail forwarded to any other account which you can then access with any mail client. Dave >> It's worse than that—many organizations have outsourced their email to >> Google. My >> university does, though I still run my own mail server… > It is the

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-08 Thread Michael Dunston
On 30 Apr 2019, at 12:43, Steven M. Bellovin wrote: It's worse than that—many organizations have outsourced their email to Google. My university does, though I still run my own mail server… It is the same situation here. Although I likely used a @vt.edu account when registering Mailmate,

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-03 Thread Benny Kjær Nielsen
On 2 May 2019, at 20:48, Dave C wrote: But what about those legitimate mails in which we want to see the images? That's not a problem. Replacing image URLs would only happen when image blocking is enabled. This step would simply be skipped if not blocking images. -- Benny

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-03 Thread Benny Kjær Nielsen
On 2 May 2019, at 19:06, Michael Nietzold wrote: Maybe you can strip out the images links via text/replace before you put the HTML into the WKWebView? Security-wise, this can only by done if the WKWebView is used to parse the text itself (otherwise a difference between the WKWebView parser

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-02 Thread Randall Gellens
On 2 May 2019, at 6:01, Steven M. Bellovin wrote: Being able to block images by default is an absolute requirement for me and I suspect for others. It's not just a huge privacy issue, it's an important part of anti-spam defenses: spammers (and other marketers) monitor remote image loading to

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-02 Thread Dave C
But what about those legitimate mails in which we want to see the images? Dave > On May 2, 2019, at 10:06 AM, Michael Nietzold > wrote: > > Maybe you can strip out the images links via text/replace before you put the > HTML into the WKWebView? > > Von meinem iDingens gesendet... > >> Am

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-02 Thread Michael Nietzold
Maybe you can strip out the images links via text/replace before you put the HTML into the WKWebView? Von meinem iDingens gesendet... > Am 02.05.2019 um 15:23 schrieb Benny Kjær Nielsen : > > On 2 May 2019, at 15:01, Steven M. Bellovin wrote: > > On 2 May 2019, at 5:19, Benny Kjær Nielsen

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-02 Thread Sam Hathaway
On 2 May 2019, at 9:23, Benny Kjær Nielsen wrote: * Not do image blocking on older macOS versions. If you decide to go this route, folks on earlier macOS versions could use something like [Little Snitch](https://www.obdev.at/products/littlesnitch/) to prevent emails “phoning home”. Hope

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-02 Thread Benny Kjær Nielsen
On 2 May 2019, at 15:01, Steven M. Bellovin wrote: On 2 May 2019, at 5:19, Benny Kjær Nielsen wrote: I don't like the idea of disabling image blocking, but the changes needed for WKWebView might be too much of a hassle to keep the WebView solution for earlier macOS releases. In that case,

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-02 Thread Steven M. Bellovin
On 2 May 2019, at 5:19, Benny Kjær Nielsen wrote: On 30 Apr 2019, at 18:24, Dave C wrote: Re WKWebView, can the new features be selectively enabled? For example, I am locked (because some apps are locked to it) to MacOS 10.12 right now. Can image blocking be not enabled and MM still use WK

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-02 Thread Benny Kjær Nielsen
On 1 May 2019, at 0:42, Annamarie Pluhar wrote: As a non-geek (and a grateful MM user!) what I think I’m understanding is that google might require some type of pricey audit that Benny can’t afford out of his own pocket. Is that right? Well, this is still not quite clear to me. I'm mainly

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-05-02 Thread Benny Kjær Nielsen
On 30 Apr 2019, at 18:24, Dave C wrote: Re WKWebView, can the new features be selectively enabled? For example, I am locked (because some apps are locked to it) to MacOS 10.12 right now. Can image blocking be not enabled and MM still use WK except for that feature such that it will work in

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-04-30 Thread Dave C
> Before we jump to that - does someone understand why Google might want this > audit? I don’t know how many users there are but perhaps google could not > require the audit? What does it do? > > My three cents. > Annamarie Benefit Google shareholders. Dave

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-04-30 Thread Annamarie Pluhar
Thanks Benny for your message. It’s yet another reason why I love MM. A developer with integrity and transparency! As a non-geek (and a grateful MM user!) what I think I’m understanding is that google might require some type of pricey audit that Benny can’t afford out of his own pocket. Is

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-04-30 Thread Verdon Vaillancourt
On Apr 30, 2019, at 9:43 AM, Steven M. Bellovin wrote: > >> On 30 Apr 2019, at 12:24, Dave C wrote: >> >> Thanks for the update Benny. >> >> Re WKWebView, can the new features be selectively enabled? For example, I am >> locked (because some apps are locked to it) to MacOS 10.12 right now.

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-04-30 Thread Steven M. Bellovin
On 30 Apr 2019, at 12:24, Dave C wrote: Thanks for the update Benny. Re WKWebView, can the new features be selectively enabled? For example, I am locked (because some apps are locked to it) to MacOS 10.12 right now. Can image blocking be not enabled and MM still use WK except for that

Re: [MlMt] Notes on latest test release and Gmail OAuth application verification

2019-04-30 Thread Dave C
Thanks for the update Benny. Re WKWebView, can the new features be selectively enabled? For example, I am locked (because some apps are locked to it) to MacOS 10.12 right now. Can image blocking be not enabled and MM still use WK except for that feature such that it will work in 19.12? Re

[MlMt] Notes on latest test release and Gmail OAuth application verification

2019-04-30 Thread Benny Kjær Nielsen
Hi MailMate users, I know I'm behind on answering emails (also on the mailing list), but it doesn't mean I'm not working :) ## WKWebView Right now I'd just like to note that I'm busy working on replacing the main message view in MailMate. It currently uses the so-called WebView class