Re: Google Dropping "Less Secure Apps" for GMail May 30th 2022

On Fri, Mar 4, 2022 at 1:25 PM James H. H. Lampert via MIDRANGE-L
<midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

I have *never* understood the logic of a host preferring, say, an
encryption key stored on an authorized client machine to a password
stored in the memory of an authorized user, nor of preferring a random
(and probably unmemorizable for most people) string of characters when
it is entirely possible to construct a completely memorizable and
entirely secure password.

It is very easy to understand. The vast majority of people are not
careful enough when devising or storing their passwords. (Most of them
will not remember a password, no matter how memorable that password
seems.) Forcing use of a crypto key ensures that some "reasonable"
threshold of security is achieved.

John Y.