{"id":9167,"date":"2019-05-01T03:08:51","date_gmt":"2019-05-01T03:08:51","guid":{"rendered":"https:\/\/www.gmass.co\/blog\/?p=4167"},"modified":"2020-02-06T08:10:13","modified_gmt":"2020-02-06T08:10:13","slug":"google-oauth-verification-security-assessment","status":"publish","type":"post","link":"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/","title":{"rendered":"My feelings on Google’s $15,000-$75,000 OAuth verification process and security assessment"},"content":{"rendered":"

Last October, Google announced that it would start being more stringent<\/a> with software vendors building apps on top of the Gmail API<\/strong>. Specifically,\u00a0developers using a “restricted” or “sensitive” Gmail API scope would be subject to additional scrutiny and have to pay a fee of $15,000 – $75,000 or more<\/em> to have a third party security assessment done. GMass leverages the power of the Gmail API to perform its magic, and so GMass has been subject to these measures.<\/p>\n

Since Google’s announcement, the web\u00a0has become rife with stories of frustration amongst smaller companies and independent developers who simply cannot afford the fee.\u00a0This\u00a0new policy stands to kill innovation, be the obstacle to side projects, and overall, make Gmail less useful. One of the primary reasons Gmail has been the email platform of choice for startups and tech companies is that it’s been extensible. There are\u00a0hundreds, if not thousands,\u00a0of extensions\u00a0for Gmail<\/a>, one of which is GMass, that\u00a0add functionality and make\u00a0Gmail more useful than the base product. Most of these applications\u00a0will disappear.<\/em> Unless a product has reached the point of business sustainability, it won’t be worth it for most developers to pay the fee and go through the security process (which by the way, will likely cost more than the fee paid, because of development time necessary for remediation).<\/p>\n

Well known extensions and Gmail apps like Boomerang, Yesware, Mixmax, and Mailtrack will likely pay the fee and succumb to the new governance, but smaller players like Context.io<\/a> and EmailMonkey have already announced their plans to shut down<\/a>. I’ve also decided to shut down my other Gmail extension, Wordzen, because the fee is too high to be worth it for Wordzen.<\/p>\n

This article from The Register<\/a>\u00a0profiles two makers of Gmail apps, Leave Me Alone and Clean Email,\u00a0and their frustrations with the new requirements.<\/p>\n

Even a popular service like IFTTT\u00a0is caving and reducing\u00a0its Gmail functionality<\/a>.<\/p>\n

My stance<\/h3>\n
    \n
  1. I’m not happy about it, but given the substantial GMass user base, we’re beginning the process of the security audit. You can follow my live updates of the OAuth verification process<\/a>.<\/li>\n
  2. I’m\u00a0a proponent\u00a0for greater security and protection of user data, but asking software developers to pay the security fee is ludicrous. Google should pay the fee on behalf of its developers (explanation below).<\/li>\n
  3. The opportunity is rife for a new email platform to make a dent in Gmail’s marketshare.<\/li>\n
  4. Prices for all Gmail apps, including GMass, will rise to cover the cost of the annual security assessment.<\/li>\n
  5. Google is grasping for straws when justifying making the developers pay. In response to the question “Why is Google asking apps to pay for the security assessment?” <\/b>they state, “As we\u2019ve pre-selected industry leading assessors, the letter of assessment your app will receive can be used for other certifications or customer engagements<\/strong> where a security assessment is needed.” Gee thanks, Google, for\u00a0making it easier for us to get more customer engagements.<\/em><\/li>\n
  6. Google’s support for developers who build Gmail apps has been poor, and\u00a0the manner in which\u00a0this issue is being handled is being done callously. Questions to the OAuth verification team go unanswered for long periods of time. Stack Overflow is littered with questions about the Gmail API<\/a>, mostly which go unanswered, despite Google pointing developers to this area<\/a>. Google has been playing favorites with Gmail Add-ons<\/a>, allowing only some to work on iOS while claiming that iOS isn’t supported<\/a>, and not providing any context for its decisions. Additionally, Chrome extensions for Gmail have never been officially sanctioned,\u00a0although when Gmail launched its new UI last year, it did inform all extension makers of the upcoming changes and provided test accounts. It’s clear that it’s up to developers to solve their own issues and work around Google’s platform shortcomings.<\/li>\n<\/ol>\n

    Conflict and Confusion<\/h3>\n

    There is also conflict and confusion amongst the information released by Google.<\/p>\n

    Does this process only affect you if your users include gmail.com accounts, or do you have to go through the process even if you just take on G Suite users?<\/strong><\/p>\n

    The language in the announcements seem to indicate that\u00a0this only affects gmail.com consumer accounts wanting access to an app.<\/p>\n

    \"\"The\u00a0use of the word “my”, however, in the question is confusing. It makes the question seem to apply to internal accounts only, those that are owned by the developer of the app. But then the answer references how G Suite administrators can control access, which implies that all external G Suite accounts are included in the group that are not impacted.<\/p>\n

    In the\u00a0detailed FAQ about who can skip the review process, one would hope that for consistency with the above that it would say “Those apps that only service G Suite accounts and not consumer gmail.com accounts”\u00a0but it doesn’t. Hmm.<\/p>\n

    \"\"<\/p>\n

    Further in the FAQ, we find:<\/p>\n

    \"\"The first paragraph references “Google Accounts outside of your organization” which I interpret to include G Suite accounts outside of your organization. But then the second paragraph says that if you don’t verify, “access for new users will be disabled” and “existing grants for consumer accounts will be revoked”. I interpret that to mean that no new G Suite nor gmail.com users will be able to OAuth connect to your app, but existing G Suite users will still be able to.<\/p>\n

    Lastly, there’s this bit:<\/p>\n

    \"\"I’m thoroughly confused at this point.<\/p>\n

    What happens if you choose to not go through the process? Will your app just show “Unverified” on the OAuth consent screen, or will it not have access to certain Gmail API scopes altogether?<\/strong><\/p>\n

    The documentation is also unclear on this issue. In the User Data Policy, we find:<\/p>\n

    \"\"<\/p>\n

    but this seems to conflict with what’s shown above:<\/p>\n

    \"\"<\/p>\n

    Finally this text under the “Sensitive Scope Verification” section seems to indicate that the only consequence of not having your app verified is that users will see that it’s Unverified.<\/p>\n

    \"\"<\/p>\n

    However, there’s no equivalent question under the “Restricted Scope Verification” section:<\/p>\n

    \"\"
    They really should include the question: “What happens if I don’t verify my app?”<\/figcaption><\/figure>\n

    It would\u00a0be preferable for the entire developer community if the only consequence of not verifying a sensitive scope app is that users see the “Unverified” designation when connecting their accounts because it allows users to still use their apps. Personally I\u00a0wouldn’t mind if GMass users go to connect their accounts and see that the app is “unverified”,\u00a0if it weren’t for the 100 user cap that is imposed on Unverified Apps<\/a>. But again, this is only clear for sensitive scope apps and not restricted scope apps.<\/p>\n

    \"\"<\/p>\n

    The scope of the security audit<\/h3>\n

    In the FAQ<\/a>, Google states “we are requiring apps that store data on non-Google servers to demonstrate a minimum level of capability in handling data securely and deleting user data upon user request.” But deeper in the FAQ, the\u00a0audit also includes developer’s code deployment practices, which seems to go beyond a minimal level in capability in handling data securely.<\/p>\n

    \"\"
    \nGoogle is in a position of power over its third party developers.<\/em> After all, where are the developers going to go? We’ve all invested substantially into building our products, many of us make a living off of what we’ve built, so we if we don’t play by the new rules, it would mark an end to our careers. We could go and build on Outlook.com’s API instead, but with just two players — Google and Microsoft — dominating the email ecosystem, there’s no guarantee that Microsoft won’t implement the same policies. Such is the risk of building a product on top of someone else’s.<\/p>\n

    Why Google\u00a0should pay the fee instead<\/h3>\n

    They can afford to, and it offers a checks and balances between the security firms and Google that doesn’t exist right now. While developers benefit from building software on top of Gmail, Google too derives benefit from attracting customers to a product that has been made better by all of its third party developers. There are users of Gmail and G Suite that would NOT be users if it weren’t for their loyalty to a particular third party app. I know for certain that in GMass’s case, we’ve\u00a0brought users to G Suite because they wanted to use GMass.<\/p>\n

    Resources on\u00a0the new Google OAuth scope policy<\/h3>\n

    Google’s original announcement<\/a> (cloud.google.com)<\/span>.<\/p>\n

    The user data policy<\/a> (developers.google.com)<\/span>.<\/p>\n

    Detailed FAQ<\/a> on the verification process and the security assessment (support.google.com)<\/span>.<\/p>\n

    Indie Hackers discussion<\/a> of the issue (indiehackers.com)<\/span>.<\/p>\n

    Inbox SDK discussion<\/a> on the issue (groups.google.com)<\/span>.<\/p>\n","protected":false},"excerpt":{"rendered":"

    Last October, Google announced that it would start being more stringent with software vendors building apps on top of the Gmail API. Specifically,\u00a0developers using a “restricted” or “sensitive”\u2026<\/p>\n","protected":false},"author":2,"featured_media":9229,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[3770,3461,5301],"tags":[],"class_list":["post-9167","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-chrome-extensions","category-gmail-add-ons","category-google-oauth"],"acf":[],"yoast_head":"\r\nMy feelings on Google's $15,000-$75,000 OAuth verification process and security assessment<\/title>\r\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\r\n<link rel=\"canonical\" href=\"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/\" \/>\r\n<meta property=\"og:locale\" content=\"en_US\" \/>\r\n<meta property=\"og:type\" content=\"article\" \/>\r\n<meta property=\"og:title\" content=\"My feelings on Google's $15,000-$75,000 OAuth verification process and security assessment\" \/>\r\n<meta property=\"og:description\" content=\"Last October, Google announced that it would start being more stringent with software vendors building apps on top of the Gmail API. Specifically,\u00a0developers using a “restricted” or “sensitive”\u2026\" \/>\r\n<meta property=\"og:url\" content=\"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/\" \/>\r\n<meta property=\"og:site_name\" content=\"GMass Blog\" \/>\r\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/GmailMailMerge\/\" \/>\r\n<meta property=\"article:published_time\" content=\"2019-05-01T03:08:51+00:00\" \/>\r\n<meta property=\"article:modified_time\" content=\"2020-02-06T08:10:13+00:00\" \/>\r\n<meta property=\"og:image\" content=\"https:\/\/www.gmass.co\/blog\/wp-content\/uploads\/2019\/05\/gmass-google-assessment.png\" \/>\r\n\t<meta property=\"og:image:width\" content=\"2002\" \/>\r\n\t<meta property=\"og:image:height\" content=\"934\" \/>\r\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\r\n<meta name=\"author\" content=\"Ajay Goel\" \/>\r\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\r\n<meta name=\"twitter:creator\" content=\"@PartTimeSnob\" \/>\r\n<meta name=\"twitter:site\" content=\"@GMassForGmail\" \/>\r\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ajay Goel\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\r\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/google-oauth-verification-security-assessment\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/google-oauth-verification-security-assessment\\\/\"},\"author\":{\"name\":\"Ajay Goel\",\"@id\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/#\\\/schema\\\/person\\\/b5fa74f8765b860701158fd77162fff8\"},\"headline\":\"My feelings on Google’s $15,000-$75,000 OAuth verification process and security assessment\",\"datePublished\":\"2019-05-01T03:08:51+00:00\",\"dateModified\":\"2020-02-06T08:10:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/google-oauth-verification-security-assessment\\\/\"},\"wordCount\":1487,\"commentCount\":27,\"image\":{\"@id\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/google-oauth-verification-security-assessment\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/05\\\/gmass-google-assessment.png\",\"articleSection\":[\"Chrome Extensions\",\"Gmail Add-ons\",\"Google OAuth\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.gmass.co\\\/blog\\\/google-oauth-verification-security-assessment\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/google-oauth-verification-security-assessment\\\/\",\"url\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/google-oauth-verification-security-assessment\\\/\",\"name\":\"My feelings on Google's $15,000-$75,000 OAuth verification process and security assessment\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/google-oauth-verification-security-assessment\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/google-oauth-verification-security-assessment\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/05\\\/gmass-google-assessment.png\",\"datePublished\":\"2019-05-01T03:08:51+00:00\",\"dateModified\":\"2020-02-06T08:10:13+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/#\\\/schema\\\/person\\\/b5fa74f8765b860701158fd77162fff8\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/google-oauth-verification-security-assessment\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.gmass.co\\\/blog\\\/google-oauth-verification-security-assessment\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/google-oauth-verification-security-assessment\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/05\\\/gmass-google-assessment.png\",\"contentUrl\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/05\\\/gmass-google-assessment.png\",\"width\":2002,\"height\":934},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/google-oauth-verification-security-assessment\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"My feelings on Google’s $15,000-$75,000 OAuth verification process and security assessment\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/\",\"name\":\"GMass Blog\",\"description\":\"Tips and tricks for sending mail merge and mass email campaigns directly from Gmail\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/#\\\/schema\\\/person\\\/b5fa74f8765b860701158fd77162fff8\",\"name\":\"Ajay Goel\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f3a70af05bbabe47925150d5a1320540e801b78055a74da20658fc97cd0706a2?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f3a70af05bbabe47925150d5a1320540e801b78055a74da20658fc97cd0706a2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f3a70af05bbabe47925150d5a1320540e801b78055a74da20658fc97cd0706a2?s=96&d=mm&r=g\",\"caption\":\"Ajay Goel\"},\"description\":\"Ajay is the founder of GMass and has been developing email sending software for 20 years.\",\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/PartTimeSnob\",\"https:\\\/\\\/x.com\\\/PartTimeSnob\"],\"url\":\"https:\\\/\\\/www.gmass.co\\\/blog\\\/author\\\/ajay-goel\\\/\"}]}<\/script>\r\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"My feelings on Google's $15,000-$75,000 OAuth verification process and security assessment","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/","og_locale":"en_US","og_type":"article","og_title":"My feelings on Google's $15,000-$75,000 OAuth verification process and security assessment","og_description":"Last October, Google announced that it would start being more stringent with software vendors building apps on top of the Gmail API. Specifically,\u00a0developers using a “restricted” or “sensitive”\u2026","og_url":"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/","og_site_name":"GMass Blog","article_publisher":"https:\/\/www.facebook.com\/GmailMailMerge\/","article_published_time":"2019-05-01T03:08:51+00:00","article_modified_time":"2020-02-06T08:10:13+00:00","og_image":[{"width":2002,"height":934,"url":"https:\/\/www.gmass.co\/blog\/wp-content\/uploads\/2019\/05\/gmass-google-assessment.png","type":"image\/png"}],"author":"Ajay Goel","twitter_card":"summary_large_image","twitter_creator":"@PartTimeSnob","twitter_site":"@GMassForGmail","twitter_misc":{"Written by":"Ajay Goel","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/#article","isPartOf":{"@id":"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/"},"author":{"name":"Ajay Goel","@id":"https:\/\/www.gmass.co\/blog\/#\/schema\/person\/b5fa74f8765b860701158fd77162fff8"},"headline":"My feelings on Google’s $15,000-$75,000 OAuth verification process and security assessment","datePublished":"2019-05-01T03:08:51+00:00","dateModified":"2020-02-06T08:10:13+00:00","mainEntityOfPage":{"@id":"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/"},"wordCount":1487,"commentCount":27,"image":{"@id":"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/#primaryimage"},"thumbnailUrl":"https:\/\/www.gmass.co\/blog\/wp-content\/uploads\/2019\/05\/gmass-google-assessment.png","articleSection":["Chrome Extensions","Gmail Add-ons","Google OAuth"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/","url":"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/","name":"My feelings on Google's $15,000-$75,000 OAuth verification process and security assessment","isPartOf":{"@id":"https:\/\/www.gmass.co\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/#primaryimage"},"image":{"@id":"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/#primaryimage"},"thumbnailUrl":"https:\/\/www.gmass.co\/blog\/wp-content\/uploads\/2019\/05\/gmass-google-assessment.png","datePublished":"2019-05-01T03:08:51+00:00","dateModified":"2020-02-06T08:10:13+00:00","author":{"@id":"https:\/\/www.gmass.co\/blog\/#\/schema\/person\/b5fa74f8765b860701158fd77162fff8"},"breadcrumb":{"@id":"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/#primaryimage","url":"https:\/\/www.gmass.co\/blog\/wp-content\/uploads\/2019\/05\/gmass-google-assessment.png","contentUrl":"https:\/\/www.gmass.co\/blog\/wp-content\/uploads\/2019\/05\/gmass-google-assessment.png","width":2002,"height":934},{"@type":"BreadcrumbList","@id":"https:\/\/www.gmass.co\/blog\/google-oauth-verification-security-assessment\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.gmass.co\/blog\/"},{"@type":"ListItem","position":2,"name":"My feelings on Google’s $15,000-$75,000 OAuth verification process and security assessment"}]},{"@type":"WebSite","@id":"https:\/\/www.gmass.co\/blog\/#website","url":"https:\/\/www.gmass.co\/blog\/","name":"GMass Blog","description":"Tips and tricks for sending mail merge and mass email campaigns directly from Gmail","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.gmass.co\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.gmass.co\/blog\/#\/schema\/person\/b5fa74f8765b860701158fd77162fff8","name":"Ajay Goel","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f3a70af05bbabe47925150d5a1320540e801b78055a74da20658fc97cd0706a2?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f3a70af05bbabe47925150d5a1320540e801b78055a74da20658fc97cd0706a2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f3a70af05bbabe47925150d5a1320540e801b78055a74da20658fc97cd0706a2?s=96&d=mm&r=g","caption":"Ajay Goel"},"description":"Ajay is the founder of GMass and has been developing email sending software for 20 years.","sameAs":["https:\/\/twitter.com\/PartTimeSnob","https:\/\/x.com\/PartTimeSnob"],"url":"https:\/\/www.gmass.co\/blog\/author\/ajay-goel\/"}]}},"_links":{"self":[{"href":"https:\/\/www.gmass.co\/blog\/wp-json\/wp\/v2\/posts\/9167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gmass.co\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gmass.co\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gmass.co\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gmass.co\/blog\/wp-json\/wp\/v2\/comments?post=9167"}],"version-history":[{"count":3,"href":"https:\/\/www.gmass.co\/blog\/wp-json\/wp\/v2\/posts\/9167\/revisions"}],"predecessor-version":[{"id":11132,"href":"https:\/\/www.gmass.co\/blog\/wp-json\/wp\/v2\/posts\/9167\/revisions\/11132"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.gmass.co\/blog\/wp-json\/wp\/v2\/media\/9229"}],"wp:attachment":[{"href":"https:\/\/www.gmass.co\/blog\/wp-json\/wp\/v2\/media?parent=9167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gmass.co\/blog\/wp-json\/wp\/v2\/categories?post=9167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gmass.co\/blog\/wp-json\/wp\/v2\/tags?post=9167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}