{"id":3056,"date":"2015-06-02T12:51:54","date_gmt":"2015-06-02T16:51:54","guid":{"rendered":"http:\/\/www.red-sweater.com\/blog\/?p=3056"},"modified":"2015-06-02T13:06:47","modified_gmt":"2015-06-02T17:06:47","slug":"marsedit-3-7-blogger-functionality-restored","status":"publish","type":"post","link":"https:\/\/redsweater.com\/blog\/3056\/marsedit-3-7-blogger-functionality-restored","title":{"rendered":"MarsEdit 3.7: Blogger Functionality Restored"},"content":{"rendered":"

I\u2019m happy to announce that MarsEdit 3.7 is available now from the MarsEdit home page<\/a> and will be submitted to the Mac App Store approval for approval by Apple. If you are an existing Mac App Store customer, you can download and use the direct-download version immediately. Just switch back to the App Store version after you notice it’s been approved.<\/p>\n

One week ago today, MarsEdit compatibility with Blogger was broken by a change in Google’s authentication requirements<\/a>. I’ve spent the past week adding the required changes to MarsEdit so that Blogger blogs can be authenticated with the most modern mechanism Google offers: their company-wide OAuth2 implementation<\/a>.<\/p>\n

The big change for Blogger users is that instead of the usual MarsEdit authentication panel, requesting your Google username and password, you will see a larger window pop up with web content served directly from Google:<\/p>\n

\"Sign<\/p>\n

While updating MarsEdit to use the new system was not a trivial undertaking, it is a valuable change for the long term. The new authentication scheme offers two significant improvements to protect your Google account’s security:<\/p>\n

    \n
  1. Your password will no longer be stored (or even handled) by MarsEdit. The Google web window authenticates you using your login information, and then shares with MarsEdit a unique authentication token, which is now stored securely in the OS X keychain. This token allows MarsEdit to connect to your Blogger account without prompting you again for permission.<\/li>\n
  2. You retain the option to revoke that access<\/a> at any time, without even opening MarsEdit. Although MarsEdit always stores passwords securely in the OS X keychain, this additional level of security ensures that even if somebody were able to gain access to your keychain contents, they would not obtain unfettered access to your entire Google account.<\/li>\n<\/ol>\n

    This has been a wild week, but I’m very relieved to be able to offer this update for Google Blogger users. Folks who don’t use Blogger should also update, because there are a few minor fixes that will, in particular, improve the experience of using the MarsEdit Media Manager for some workflows.<\/p>\n

    Complete list of changes in MarsEdit 3.7:<\/p>\n