[OFFTOPIC] Outlook vs. Dovecot experience

Michael Peddemors michael at linuxmagic.com
Tue Jan 18 15:13:10 UTC 2022


On 2022-01-17 1:10 a.m., Marc wrote:
>>
>> 	Please also note that atleast for M365 licensed version of Outlook
>> for Mac (version 16.57) now forces sync to microsoft cloud by default when
>> adding IMAP account:
>>
>> 	https://imgur.com/a/sB3Kfu6
>>
>> 	(says in image: For better experience, your messages will be synced
>> to the Microsoft cloud)
>>
>> 	I cannot opt-out from this. (Just realised that this actually might
>> be something forced by my employers Intune policies)
>>
>>
>> And indeed after I continued to add the account the incoming IMAPS
>> connection to my dovecot server came from 52.98.150.133 wwned by
>> Microsoft.
>>
> 
> I do no think it is related with settings. I have a 'airlocked' test environment with exch 2016 and I was surprised that the mobile outlook app is also connecting to the microsoft cloud. Which really surprised me, that must be against all GDPR legislation.
> Thus currently if you have an exchange server you can not get email on mobiles without using a 3rd party app. They are totally mental at microsoft.
> 
> 
> 

Even worse, the initial setup of an email account against 3rd party 
email servers, attempts to initialize an authentication attempt from the 
Microsoft cloud, instead of from the client IP, breaking authentication 
restrictions, and the IP(s) used for this in the MS cloud, have exactly 
the same PTR and whois description as any other cloud IP, eg a malicious 
hacker could own.   AND the credentials of course are now shared with an 
unexpected party (Privacy, not sure if that is listed in the Outlook 
terms and conditions).  As well, (not confirmed) if the auto discovery 
includes attempting non SSL/TLS there is a risk of credentials going 
unencrypted over the air.  Anyone else confirm that?


-- 
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.


More information about the dovecot mailing list