Google Online Security Blog: Adding OAuth 2.0 support for IMAP/SMTP and XMPP to enhance auth security

Adding OAuth 2.0 support for IMAP/SMTP and XMPP to enhance auth security

2012년 9월 17일

Posted by Ryan Troll, Application Security Team(Cross-posted from the Google Developers Blog)we announcedOAuth 2.02-step verificationIMAP/SMTPXMPP

We are deprecating XOAUTH for IMAP/SMTP, as it uses OAuth 1.0a, which was previously deprecated. Gmail will continue to support XOAUTH until OAuth 1.0a is shut down, at which time support will be discontinued.

We are also deprecating X-GOOGLE-TOKEN and SASL PLAIN for XMPP, as they either accept passwords or rely on the previously deprecated ClientLogin. These mechanisms will continue to be supported until ClientLogin is shut down, at which time support for both will be discontinued.

Google Developers BlogOAuth 2.0 PlaygroundService AccountsUsing OAuth 2.0 to Access Google APIs

댓글 1개 :

익명 :: It's good to see more OAuth adoption from Google.

I have a question.
You mention in the article that you have deprecated OAuth 1.0a, and you're implementing OAuth 2.0.

Can you explain why you consider OAuth 2.0 more secure than 1.0a?

Also, which version of the OAuth 2.0 spec do you implement in your services?; 2012년 9월 17일 오후 4:09

댓글 쓰기

Security Blog

Adding OAuth 2.0 support for IMAP/SMTP and XMPP to enhance auth security

댓글 1개 :

태그

Archive

Feed