Is RoundCube a "less secure app"?

[rounded]

In trying to configure RoundCube to access my gmail, I learned that I need to change my security settings to enable access for "less secure apps".  It's explained here:

https://support.google.com/accounts/answer/6010255

I'm concerned about this.  Is there any way to use RoundCube with gmail without lowering gmail's security settings?

[tryphon]

Hi,

I have the same issue. I wonder if someone could provide a solution.

Thank you.

[SKaero]

Roundcube doesn't support Gmail's oAuth over IMAP setup so that is why it is viewed as a "less secure app". The basic complain here is that your gmail password has to go though Roundcube before get to Gmail. Roundcube still supports all of modern encryption so your password is encrypted between your server and Google's. As far as I know Gmail's oAuth over IMAP setup isn't part of the IMAP specification, but it could probably be addressed with a Roundcube plugin.

[tryphon]

Thank you for this clarification. It is appreciated.