Adding OAuth 2.0 support for IMAP/SMTP and XMPP to enhance auth security
Blog post from Google Cloud
In an effort to improve authentication security, Google announced the addition of OAuth 2.0 support for IMAP/SMTP and XMPP, enhancing the protection of user information by eliminating the need for passwords in client applications. This move allows developers to create more secure apps using Google's platforms while enabling users to maintain greater control over their data access. The company is deprecating older authentication methods like XOAUTH for IMAP/SMTP and X-GOOGLE-TOKEN and SASL PLAIN for XMPP, as these rely on outdated or less secure standards. The transition to OAuth 2.0 aligns with Google's long-term goal of strengthening user data protection through advanced security features such as 2-step verification. The initiative is part of Google's ongoing commitment to enhancing application security, which began with the initial support of OAuth in 2008.