Re: Two-phase authentification?

2015-02-19 Thread Ben Gold

Mutt wiki being http://dev.mutt.org/trac/wiki/MuttWiki?

Also, does anyone have a sense of how secure/insecure aes-256 is?  My
limited understanding is it is pretty secure, but I am not a security
guy or anything.

-ben

On Wed, Feb 18, 2015 at 03:28:12PM -0600, David Champion wrote:

* On 18 Feb 2015, Ben Gold wrote:

To encrypt the password I entered this on the commandline (OS X):

   openssl aes-256-cbc -salt -out pw.txt -in cleartext.txt
   (openssl then prompts your for an encryption password)


and in my muttrc file I wrote:

   set imap_pass = `openssl aes-256-cbc -salt -d -in ~/.mutt/pw.txt`
   set smtp_pass = $imap_pass


Nice! If you have time to add this somewhere in the Mutt wiki, it looks
like a good approach.

--
David Champion • d...@bikeshed.us


Re: Two-phase authentification?

2015-02-18 Thread Ben Gold


Aha! I'm sorry. I misinterpreted your reply. You mean I have to
create an application-specific password to use IMAP once I've enabled
2-factor authentication. (I don't know where I got authentification
from ... fingers on auto-pilot, I guess.)

I've done this.  I created an application password just for mutt that allows 
mutt to bypass Google's two-step verification.

I encrypted it with openssl with my normal email password, so now mutt asks me 
for the aes-256 password at startup and it's the same effectively as typing in 
my email password once per session.

To encrypt the password I entered this on the commandline (OS X):

   openssl aes-256-cbc -salt -out pw.txt -in cleartext.txt
   (openssl then prompts your for an encryption password)


and in my muttrc file I wrote:

   set imap_pass = `openssl aes-256-cbc -salt -d -in ~/.mutt/pw.txt`
   set smtp_pass = $imap_pass


Re: Two-phase authentification?

2015-02-18 Thread David Champion
* On 18 Feb 2015, Ben Gold wrote: 
 To encrypt the password I entered this on the commandline (OS X):
 
openssl aes-256-cbc -salt -out pw.txt -in cleartext.txt
(openssl then prompts your for an encryption password)
 
 
 and in my muttrc file I wrote:
 
set imap_pass = `openssl aes-256-cbc -salt -d -in ~/.mutt/pw.txt`
set smtp_pass = $imap_pass

Nice! If you have time to add this somewhere in the Mutt wiki, it looks
like a good approach.

-- 
David Champion • d...@bikeshed.us


Re: Two-phase authentification?

2015-02-12 Thread David Champion
* On 12 Feb 2015, Peter Davis wrote: 
 I think I know the answer to this, and I think it's no, but just for fun, 
 is there any way to use mutt with GMail's 2-phase authentification?

(The last time I checked) GMail doesn't support 2-factor with IMAP.  You
have to set up an application-specific password to enable 2-factor
for web and the mobile app, while still using IMAP.  This isn't
mutt-specific, it's for any IMAP client.

References:
https://productforums.google.com/forum/#!topic/gmail/WUaXHSdI3WM
https://support.google.com/mail/answer/1173270?hl=en

-- 
David Champion • d...@bikeshed.us


Two-phase authentification?

2015-02-12 Thread Peter Davis
I think I know the answer to this, and I think it's no, but just for fun, is 
there any way to use mutt with GMail's 2-phase authentification?

I generally use mutt for another imap server, and use other tools for GMail, 
but I now have a use for reading GMail via mutt, and wondered if there's a way 
to do this without
simply disabling the 2-phase authentification.

The GMail app and the Web site will require me to enter a security code that's 
been SMS messaged to my phone, but I suspect mutt has no way to work around 
that. Am I right?

Thanks!

-pd


-- 

Peter Davis
The Tech Curmudgeon
www.techcurmudgeon.com


Re: Two-phase authentification?

2015-02-12 Thread Peter Davis
On Thu, Feb 12, 2015 at 10:17:00AM -0600, David Champion wrote:
 * On 12 Feb 2015, Peter Davis wrote: 
  I think I know the answer to this, and I think it's no, but just for fun, 
  is there any way to use mutt with GMail's 2-phase authentification?
 
 (The last time I checked) GMail doesn't support 2-factor with IMAP.  You
 have to set up an application-specific password to enable 2-factor
 for web and the mobile app, while still using IMAP.  This isn't
 mutt-specific, it's for any IMAP client.

Interesting. What I experienced is:

1) I attempted to connect with mutt, and got prompted for my password.
2) I entered my usual password.
3) I saw a long message flash on the screen very quickly. I could not read past 
the first word ... Warning. Then mutt displayed Login failed
4) I got an email from GMail telling me that someone had attempted to login, 
and that I would have to disable the 2-factor authentification to use this 
client

Thanks,
-pd


-- 

Peter Davis
The Tech Curmudgeon
www.techcurmudgeon.com