asterisk users - Mar 2016 - asterisk a "less secure app" on google ??

To connect to google voice with xmpp, I've had to turn on the "less 
secure apps" switch.
> You recently changed your security settings so that your Google Account
xxxxxxx at gmail.com is no longer protected by modern security standards.
>
> Please be aware that it is now easier for an attacker to break into your
account.

My xmpp.conf :

type=client
serverhost=talk.google.com
secret=mysecret
priority=25
port=5222
usetls=yes
usesasl=yes
status=available
statusmessage="Not available"
timeout=5

Is there a way to configure xmpp so I don't have to turn on "less
secure
apps" ?

Is this just a way of google messing with us ?

sean

My guess is that you should be able to use 2fa but enable this by using an
"app specific password" in your Google account (accounts.google.com
>
Sign-In and Security > App Passwords). I haven't tried it with this exact
setup though.

On Sun, Mar 27, 2016 at 6:13 AM, sean darcy <seandarcy2 at gmail.com>
wrote:
> To connect to google voice with xmpp, I've had to turn on the
"less secure
> apps" switch.
>
> You recently changed your security settings so that your Google Account
>> xxxxxxx at gmail.com is no longer protected by modern security
standards.
>>
>> Please be aware that it is now easier for an attacker to break into
your
>> account.
>>
>
>
> My xmpp.conf :
>
> type=client
> serverhost=talk.google.com
> secret=mysecret
> priority=25
> port=5222
> usetls=yes
> usesasl=yes
> status=available
> statusmessage="Not available"
> timeout=5
>
> Is there a way to configure xmpp so I don't have to turn on "less
secure
> apps" ?
>
> Is this just a way of google messing with us ?
>
> sean
>
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.digium.com/pipermail/asterisk-users/attachments/20160327/b0511d19/attachment.html>

On 03/27/2016 01:41 PM, Lincoln Quirk wrote:
> My guess is that you should be able to use 2fa but enable this by using
> an "app specific password" in your Google account
(accounts.google.com
> <http://accounts.google.com> > Sign-In and Security > App
Passwords). I
> haven't tried it with this exact setup though.
>
> On Sun, Mar 27, 2016 at 6:13 AM, sean darcy <seandarcy2 at gmail.com
> <mailto:seandarcy2 at gmail.com>> wrote:
>
>     To connect to google voice with xmpp, I've had to turn on the
"less
>     secure apps" switch.
>
>         You recently changed your security settings so that your Google
>         Account xxxxxxx at gmail.com <mailto:xxxxxxx at gmail.com> is
no
>         longer protected by modern security standards.
>
>         Please be aware that it is now easier for an attacker to break
>         into your account.
>
>
>
>     My xmpp.conf :
>
>     type=client
>     serverhost=talk.google.com <http://talk.google.com>
>     secret=mysecret
>     priority=25
>     port=5222
>     usetls=yes
>     usesasl=yes
>     status=available
>     statusmessage="Not available"
>     timeout=5
>
>     Is there a way to configure xmpp so I don't have to turn on
"less
>     secure apps" ?
>
>     Is this just a way of google messing with us ?
>
>     sean
>
But I don't use 2fa to login from a browser. It's not turned on (as far 
as I know).

sean