115.16.2 Google password is taken in a Thunderbird window! And Google accepts it!
On Windows, Get Messages on a Gmail mailbox requests my Google Account password be entered in to a Thunderbird window: https://i.imgur.com/Q4Eivhk.png
That window obfuscates that is it from Thunderbird not my trusteed web browser by omitting the title bar icon.
Worse, Google actually accepts and acts upon this password.
No user in their right mind should be giving their Google password to Thunderbird. No non-Google app in its right mind should be taking Google passwords.
所有回复 (4)
Workaround: first login in your trusted Chrome browser. And don't stop to think how your login leaks from trusted Chrome to Thunderbird.
由firefox.com.yes.really于修改
No user in their right mind should be giving their Google password to Thunderbird.
Gmail is Google. How do you think you get to your Gmail messages via Thunderbird without providing your Google account password?
If you use OAuth2 authentication with Thunderbird for your Gmail account (which you should use), you'd get exactly the kind of login prompt you describe. This is a Thunderbird window, and it's not related to any web browser at all. Neither is there any leakage from Chrome to Thunderbird. For this to work make sure you do have cookies enabled in Thunderbird.
> How do you think you get to your Gmail messages via Thunderbird without providing your Google account password?
How? Provide it to Google as per the setup process for eM Client email program for example.