Google Drive Blocks Unverified Apps
Recently, Google has limited or blocked direct connections to Google Drive through ForkLift. Depending on whether users have previously connected to Google Drive through ForkLift, they may encounter one of two warnings when trying to connect via the Connect Panel.
[…]
Google now requires apps like ForkLift to undergo the Cloud Application Security Assessment (CASA). This assessment ensures that apps meet strict security standards to protect user data and maintain secure integrations.
Undergoing the CASA process helps ForkLift identify and fix any security issues, safeguarding user data and ensuring our security practices are transparent. However, meeting these requirements can be a lengthy process. Even if ForkLift meets all standards immediately, the assessment can take up to six weeks. If significant changes are needed, it could take much longer.
I don’t like this trend of Google making it harder for users to access its services via third-party apps, and the security benefits seem questionable.
Previously:
Update (2024-09-30): Binarynights:
After successfully completing Google’s Cloud Application Security Assessment (CASA), ForkLift has received OAuth App Verification approval, meaning you can once again connect directly to Google Drive without any warnings or blocks.
Previously:
1 Comment RSS · Twitter · Mastodon
The security benefits are for Google, obviously. Calling something "less secure" because it uses standardised authentication to pass an opaque token instead of a protocol that puts a Google sign-in flow into the mix is just obviously bollocks.
