<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/xhtml; charset=utf-8">
</head>
<body>
<div style="font-family:sans-serif"><div style="white-space:normal">
<p dir="auto">Hi MailMate users,</p>
<p dir="auto">most of this email is somewhat technical. Just ignore it if it's incomprehensible.</p>
<p dir="auto">It's likely that no one has noticed, but I've changed how Gmail accounts are authorized in the latest test releases. The authorization is now done in an external browser (instead of an embedded browser). I've done this for two reasons.</p>
<ol>
<li value="1">It's the recommended approach for <a href="https://tools.ietf.org/html/draft-ietf-oauth-native-apps-10#section-8.11" style="color:#3983C4">security reasons</a>.</li>
<li value="2">Google has <a href="https://developers.googleblog.com/2016/08/modernizing-oauth-interactions-in-native-apps.html" style="color:#3983C4">warned</a> that they'll stop supporting the embedded approach. I don't know the exact time frame on this, but I'd like to be ready when it happens.</li>
</ol>
<p dir="auto">I have not changed the OAuth2 approach for <code style="background-color:#F7F7F7; border-radius:3px; margin:0; padding:0 0.4em" bgcolor="#F7F7F7">outlook.com</code> since they don't appear to support anything but the embedded approach. (It also doesn't affect iCloud for which third party applications can only support the password based approach -- using application specific passwords if two factor authentication/verification is enabled.)</p>
<p dir="auto">You can help me out by testing the new method like this:</p>
<ol>
<li value="1">Hold down ⌥ when clicking “Check Now” in the Software Update preferences pane to get the latest test release.</li>
<li value="2"><p dir="auto">Use “Keychain Access” to remove existing tokens named like this:</p>
<pre style="background-color:#F7F7F7; border-radius:5px 5px 5px 5px; margin-left:15px; margin-right:15px; max-width:90vw; overflow-x:auto; padding:5px" bgcolor="#F7F7F7"><code style="background-color:#F7F7F7; border-radius:3px; margin:0; padding:0" bgcolor="#F7F7F7">com.freron.MailMate.Google.oauth-token
com.freron.MailMate.Google.oauth-refresh-token
</code></pre></li>
<li value="3"><p dir="auto">Relaunch or take Gmail account(s) offline/online.</p></li>
<li value="4"><p dir="auto">Finally, see if MailMate asks you to authorize the account(s) and does this using an external browser.</p></li>
</ol>
<p dir="auto">Thanks in advance.</p>
<p dir="auto">Off topic: Next week, starting Tuesday, I'll be on vacation in Rome and I might be even slower at answering emails than usual (I'm not completely offline though).</p>
<p dir="auto">-- <br>
Benny</p>
</div>
</div>
</body>
</html>