Ask HN: Did Google turn off IMAP access for good over the weekend?

You need to set up an app specific password [1] and use that for IMAP.

[1] https://support.google.com/mail/answer/185833?hl=en

tankenmate · 6 years ago

Or better yet use the IMAP / SMTP Oauth2 auth mechanism;

https://developers.google.com/gmail/imap/xoauth2-protocol

nanna · 6 years ago

Guide to setting up OAuth2 in offlineimap:

https://hobo.house/2017/07/17/using-offlineimap-with-the-gma...

dgudkov · 6 years ago

The problem with OAuth and Google is that Google requires from 3rd party vendors verification and it's very hard to obtain. Unsurprisingly, Google rejects requests for verification without any explanation and ignores any follow up communication.

pmlnr · 6 years ago

I despise oauth2 reauthentication requests in a mail client. It's insanely annoying.

matheusmoreira · 6 years ago

Do mutt and git-send-email have support for OAuth2?

rtx · 6 years ago

They have turned it back on.

throwaway49872 · 6 years ago

It does not work on some group accounts.

On a related note, how can I run internal mailserver that stores mail locally on my network, accessible through IMAP or web interface, and uses accounts on a POP3/IMAP-capable public server like Gmail only to receive and send mail (no long-term storage)? Where should I look?

I'm comfortable with setting up a VM, but I don't know much about email.

rkeene2 · 6 years ago

I would use something like OfflineIMAP to sync from an external IMAP server to your own Dovecot instance, assuming you want the local copy to be kept in sync (e.g., read status should be copied to the local copy as it changes, etc).

mcint · 6 years ago

Ah, misread. I was just looking into entirely self-hosting this last week.

https://github.com/awesome-selfhosted/awesome-selfhosted#ema... See especially homebox, Mail-in-a-box "complete solutions".

With brief exploration you might also be comfortable with just running the MTA for sending and forwarding, and MDA for "delivery", i.e. reading.

ForHackernews · 6 years ago

I haven't used it in a few years, but https://www.iredmail.org/ was fairly hassle-free if you're familiar with linux server administration.

compuguy · 6 years ago

I personally like dockerized Mailcow: https://github.com/mailcow/mailcow-dockerized

eloh · 6 years ago

neilk · 6 years ago

I’m out of the loop - where does Google commit to turning off IMAP? Is there any other standard that non-Google mail clients can follow?

Will Apple Mail lose Gmail compatibility or can they upgrade to something?

rob-olmos · 6 years ago

This is the original announcement I'm aware of:

https://gsuiteupdates.googleblog.com/2019/12/less-secure-app...

minedwiz · 6 years ago

IIRC Apple Mail uses IMAP via Oauth.

thayne · 6 years ago

So it's specifically IMAP without OAuth?

sanchay · 6 years ago

Happening since morning, I got rid of Gapps on phone (for privacy concerns) and can't use K-9 Mail anymore, guess I'll have to resort to mobile browsers for email access.

kl4m · 6 years ago

Can't you create an "application password" for IMAP?

kgwxd · 6 years ago

That requires two-factor auth, which requires giving them a phone number.

Also for me this page (https://myaccount.google.com/lesssecureapps) says - "Setting could not be read".

generalpass · 6 years ago

Unless it's for work, why not use a different service or host your own mail server? I'd say setting up a mail server with projects like Mail In A Box is easier than living without GApps.

httpsterio · 6 years ago

Running your own mail server is a sure fire way of making sure that your email don't get through to anyone.

dlandau · 6 years ago

At least for me it's for work

EllipticCurve · 6 years ago

I can confirm. Same thing for, started 3 hours ago. It seems to work again for the moment though (after one hour, no change from my side).

The setting is also gone for me!

hazeii · 6 years ago

Plenty of comments and current status at downdetector[0]. Clicking on the different countries suggests it's a global thing.

Edit: the "Less secure apps" [1] setting was reporting "setting could not be read", it's just re-appeared here in the UK (11:40 UTC).

[0] https://downdetector.co.uk/status/gmail/

[1] https://myaccount.google.com/lesssecureapps

chupasaurus · 6 years ago

I have no problem with it so far. Thunderbird on Debian through VPN in Amsterdam. (edit: wording)

Plenty of others in NL appear to have been hit [0]. Seems to be resolved now anyway.

[0] https://allestoringen.nl/storing/gmail/

zozbot234 · 6 years ago

> However, with the pandemic they delayed this indefinitely.

I guess someone didn't get the memo. Or else yes, perhaps they got some automated thing scheduled in advance and failed to roll it back properly as announced.

bitlevel · 6 years ago

> I guess someone didn't get the memo.

Probably 'cause they can't log into their IMAP account right now...

ejo4041 · 6 years ago

I just switched to g suite for business over the weekend and setup mail checking from my main account. I found enabling "Less secure apps" to get sending and receiving emails from my other accounts via POP3 to be very odd. Also had to create the app specific password. How is it a less secure app? It's a gmail account checking another gmail account. That really didn't make sense to me, but the tech support from g suite was happy to read the script to walk me through the setup. It was pretty frustrating to not be able to figure that out myself, it was not intuitive.

maltfield · 6 years ago

Also confirming an issue for the past few hours.

It's currently 2020-05-04 11:26 UTC and the issue is ongoing.

EDIT: does anyone know if google has an "uptime" page for their various services where they can provide status updates as they diagnose the issue? This is impacting our entire org on G-suite.

EDIT2: Found this, but it shows "Gmail" as "green" Yeah, it's still down :rolleyes: https://www.google.com/appsstatus#hl=en

EDIT3: As of 2020-05-04 11:45 UTC, it's back up for me.

mopsi · 6 years ago