[GNC] Using Plaid

[Steve Brown]

This is interesting.

https://www.plaidsettlement.com/

This prompted me to look at a Quicken OFX log after downloading
investment transactions from Raymond James. That log stays traffic
comes from 

https://directconnect.rjf.com/eftxweb/access.ofx

but the traffic really comes from

https://services.quicken.com/ofx-secure-plus

Third parties collecting your bank credentials and sniffing your
financial traffic, what can go wrong?

Steve

On Tue, 2023-02-28 at 15:51 -0800, Jean Laroche wrote:
> To me it's very different.  You're not giving a user name and a
> password 
> to AQBanking. I started using Plaid, then got really spooked by the
> fact 
> that they do have access to your account as if they were you. Removed
> my 
> account and canceled my keys.
> There are no current alternatives at the moment, unlike in Europe
> where 
> there seem to be, I believe mandated by the EU.
> I wrote automated scripts to scrape my banks for the OFX files, but 
> that's a royal pain in the butt, and it's not robust at all.
> 
> Jean
> 
> On 2/28/23 3:44 PM, Ben Pracht wrote:
> >   I read that disclaimer. It says to keep the token secure and yes,
> > the
> > bearer of that token gets access. As they said:
> > "The access token generated by using this tool is sensitive
> > material as it
> > grants access to your accounts. It should be handled with care and
> > protected from unauthorized access. You must be sure to store it in
> > such a
> > way that makes it impossible for others to gain access. The
> > creators and
> > maintainers of Plaid2QIF are in no way responsible if you mishandle
> > your
> > access token."
> > 
> > GIving Plaid2QIF this token is no different than me giving a
> > username and
> > password to AQBanking, except that Plaid has a chance of working. I
> > don't
> > like having an intermediary, in this case Plaid and Plaid2QIF, but
> > OFX is
> > unusable, and at the moment, AQBanking isn't even showing the list
> > of banks
> > anymore. Does anyone know of a US bank or credit union that uses a
> > modern
> > REST based API that they actually share with developers?
> > 
> > Regards,
> > Ben
> > 
> > On 2/22/23 23:08, john wrote:
> > 
> > On Feb 22, 2023, at 2:01 PM, Ben Pracht<ben.pracht.news at gmail.com>
> > <ben.pracht.news at gmail.com>  wrote:
> > 
> > I'd like to use Plaid with GnuCash. There is a plaid2qif project
> > that
> > claims to have been extensively tested with GnuCash and Plaid.
> > However,
> > when I created the Plaid account, it asks for either a limited
> > developer
> > account or a production account with a compliance audit. What
> > account type
> > should I use? Anything else helpful to know?
> > 
> > 
> > Neither. See
> > https://github.com/ebridges/plaid2qif/blob/master/gen-access-token/README.md
> > ,
> > 
> > Pay particular attention to the disclaimer at the bottom of that
> > page.
> > 
> > Regards,
> > John Ralls
> > _______________________________________________
> > gnucash-user mailing list
> > gnucash-user at gnucash.org
> > To update your subscription preferences or to unsubscribe:
> > https://lists.gnucash.org/mailman/listinfo/gnucash-user
> > -----
> > Please remember to CC this list on all your replies.
> > You can do this by using Reply-To-List or Reply-All.
> _______________________________________________
> gnucash-user mailing list
> gnucash-user at gnucash.org
> To update your subscription preferences or to unsubscribe:
> https://lists.gnucash.org/mailman/listinfo/gnucash-user
> -----
> Please remember to CC this list on all your replies.
> You can do this by using Reply-To-List or Reply-All.