Allow app-specific passwords

[smoochy]

Hi Dimitrios,

thanks for this nice extension. I want to move away from using my normal email on every website, but unfortunately Chrome is not natively offering this feature, and 1password is refusing to implement is (as they have their own thing with FastMail going on). So your work is really appreciated.

Apple offers to use a feature called app-specific passwords which I would rather use than providing my real password - though I am using 2FA.

I tried to use to login with an app-specific password, but it did not work, I got the error message

Failed to sign in. Please try again.

When I use my normal password it is accepted, I get asked for my 2FA, put that in and it works.

If you put in that feature, I would suggest to prominently display that feature, as it will put more trust into your extension.

Kind Regards.

[smoochy]

If you wan to, you can have a look at the Python Caldav Repo. It does work with app-specific passwords.

[dedoussis]

Hi @smoochy! This extension authenticates with the iCloud services as if it was the www.icloud.com web app. Unfortunately, app-specific passwords do not work on icloud.com and consequently on this extension.

I dived a bit deeper into app-specific passwords, and as far as I understood, these can only be used on services of iCloud that expose a DAV-like interface (with the exception of mail). For example:

• The Contacts services exposes CardDAV interface accessible at https://contacts.icloud.com
• The Calendar services exposes CalDAV interface accessible at https://caldav.icloud.com

I have not managed to find a similar service specific to Hide My Email (or premiummailsettings / maildomainws ), hence I'm not sure if this is even possible at all.

Will leave this issue open, in case anyone comes up with any ideas on how we can approach this.