<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title></title>
</head>
<body>
<div name="messageBodySection">
<div dir="auto">When using Gmail and other oauth based services they don’t get the password just a token for that specific account thus I find this very hard to believe. </div>
</div>
<div name="messageSignatureSection"><br />
<div dir="auto">/max</div>
</div>
<div name="messageReplySection">On 6 Sep 2020, 04:46 +0200, Charlie Garrison <charlie-lists@garrison.com.au>, wrote:<br />
<blockquote type="cite" style="border-left-color: grey; border-left-width: thin; border-left-style: solid; margin: 5px 5px;padding-left: 10px;">
<div style="font-family:sans-serif">
<div style="white-space:normal">
<p dir="auto">On 6 Sep 2020, at 3:20, Antonio Leding wrote:</p>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
<p dir="auto">If you have a different interpretation or know where I missed it, please share… :=)</p>
</blockquote>
<p dir="auto">Yes, I have a different interpretation, based on my experience using Spark a few years ago. Their docs don't clarify whether anything has changed; I suspect it hasn't. When I reported the "breach" to them at the time; they clearly stated the passwords were kept on their servers, and the account they were accessing (on my behalf) was a bug and that shouldn't have happened. It would have been impossible to happen had they not "stolen" email creds.</p>
<p dir="auto">Unless they have changed, Spark keeps creds <strong>on their servers</strong> and not just in IMAP client. Reading between the lines of their docs; their servers access your mailboxes directly (not just via iOS app), which is how they know when to send push notifications.</p>
<p dir="auto">-cng</p>
<p dir="auto">--</p>
<pre style="background-color:#F7F7F7; border-radius:5px 5px 5px 5px; margin-left:15px; margin-right:15px; max-width:90vw; overflow-x:auto; padding:5px" bgcolor="#F7F7F7"><code style="background-color:#F7F7F7; border-radius:3px; margin:0; padding:0" bgcolor="#F7F7F7">Charlie Garrison <charlie@garrison.com.au>
Garrison Computer Services <http://www.garrison.com.au>
PO Box 380
Tumbarumba NSW 2653 Australia
</code></pre></div>
</div>
_______________________________________________<br />
mailmate mailing list<br />
mailmate@lists.freron.com<br />
https://lists.freron.com/listinfo/mailmate<br /></blockquote>
</div>
</body>
</html>