• TWeaK@lemm.ee
    link
    fedilink
    English
    arrow-up
    52
    arrow-down
    2
    ·
    8 months ago

    You cannot use the new Outlook app without syncing these data with Microsoft’s servers, i.e. your usernames and passwords are sent to the company’s cloud servers. While the data is sent using TLS, the IMAP and SMTP username and password are sent to Microsoft in plain text. This could allow the company to access your emails, and share the data with third-parties.

    Not only that, but sending usernames and passwords in plaintext allows for MITM attacks.

    • cm0002@lemmy.world
      link
      fedilink
      arrow-up
      11
      ·
      8 months ago

      Isn’t MS on the government shit list right now over security missteps that led to the breach of gov officials?

      • Echo5@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        8 months ago

        Not sure what difference that makes since the military uses the MS office suite for everything

    • shadycomposer@lemmy.world
      link
      fedilink
      arrow-up
      3
      ·
      8 months ago

      I think outlook iOS has been storing credentials on server since day one, even before it was acquired by Microsoft. I’m not sure what the new outlook app means.