Don’t use “Outlook (new)” in #Windows 11. I just did a tcpdump and looked also at my #mail servers when setting up an account in there. The mail client only spoke with Microsoft-servers, never with my mail-servers and I saw on my mail-servers only connections from Microsoft-IPs.
@nielsk So would it make sense to block MS on submission and IMAP ports? What legitimate business could they have?

@unixtippse @nielsk

It sounds like they proxy all the connections so all the mail passes through their servers. I wonder how long they keep it? I guess everyone’s emails become grist for AI.

I wonder what their terms of service say about that?

@railmeat @unixtippse I dunno. But it is more less the same what they do with the mobile Outlook-clients

@nielsk @unixtippse

I guess that is the world we live in now. Not really my preference.

Yet another reason to move my computing to self hosted and possibly Linux.

@railmeat @nielsk @unixtippse If we don't stop companies from implementing toxic business culture, it will get worse. Someday we will live in a world we don't really want to live in. We will no longer own anything, not even our data.
Too many people don't care and even defend these companies.

@mrcool @railmeat @nielsk @unixtippse

Agreed, except for the word 'someday'.

It will get worse for sure, but that's already the world we live in.

@Tom @railmeat @nielsk @unixtippse You are right. Even I can see how I'm slowly getting used to it. And that's how it will continue. Small steps, so that people don't realize that their rights and their data are gradually being taken away from them.

@mrcool

Too late! We already gave up our entire life to them.
Sadly, this is true.

@mrcool @railmeat @nielsk @unixtippse With M$, Google, Meta, AWS basically in charge of at least a large part of the Internet we can quietly already wonder how far we are on our way to a World like that.

And too many companies, and especially governments, are still quietly moving our personal data into the hands of these companies.

Certainly anyone working in an administrative position in government can work perfectly with a Linux based computer, but all they want is Windows.....

@railmeat if you have time, bandwidth and money, I would highly recommend self-hosting, I've learnt loads by doing it!

@railmeat @unixtippse @nielsk

It's documented, that they store the credentials to the Mailservers in cleartext on their servers and fetch the Mails there. It's a shitty design.

@seism0saurus @unixtippse @nielsk

Credentials in plain text? I thought we got past that in the’90s.

Where is that documented?

@railmeat @unixtippse @nielsk

Otherwise they can't access your Mailservers.
I'm not sure if the data at rest is unencrypted but at least it is reversible since they need it for login to your mailservers.
It is definitely not a standard like bcrypt or scrypt there the credentials are secured by a one way function

https://www.heise.de/en/news/Microsoft-lays-hands-on-login-data-Beware-of-the-new-Outlook-9608798.html

Microsoft lays hands on login data: Beware of the new Outlook

The free new Outlook replaces Mail in Windows, and later also the classic Outlook. It sends secret credentials to Microsoft servers.

heise online
@railmeat @unixtippse @nielsk 25 years ago this would have been treated as felony wiretapping.
@AstaMcCarthy @railmeat @unixtippse @nielsk By the letter of the law, yes, but norms have gone to hell and nobody will prosecute.

@dalias @unixtippse @nielsk

It would be great if someone prosecuted them.

I would guess users agree to it in the terms of service. But who knows, no one has time to read that.