I'm making a project for school where I will be using PHP to allow my users to log in to their email account using PHPMailer to receive/send emails.
The purpose is that I will be providing an encryption service.
But that means that they will have to send their password to my server, and my PHP script will be accessing their emails and sending/receiving them back to them after processing.
It's a school project so I will be doing it anyway on a local XAMPP setup for the project. But I was wondering if I could make the service public.
My question is, do I risk being sued by, ie Google, if I enabled Gmail users to use my service?
After all it is legal to distribute an email client. The part that has me worried is that my server will be acting as a proxy and will at one point receive their password (although it will not be stored).
(I know I could setup my own email server for this, but the idea would be to let users use their current email addresses)
EDIT I plan on using HTTPS to avoid having plain text passwords flying around.