Don’t use “Outlook (new)” in #Windows 11. I just did a tcpdump and looked also at my #mail servers when setting up an account in there. The mail client only spoke with Microsoft-servers, never with my mail-servers and I saw on my mail-servers only connections from Microsoft-IPs.
@nielsk What does this mean? Break it down for me, your friendly neighborhood layperson
@condalmo “Outlook “New””will replace Windows Mail. When you use Outlook New, you give Microsoft access to your mail-account and they store your credentials incl. your password and mails on their servers, even if you are not using them as your e-mail-provider but a totally different mail-provider. It is the same for the Outlook-client on iOS, Android and macOS.
@nielsk @condalmo To be nit-picky it's more likely they are storing an oauth2 token as most email providers aren't using raw passwords anymore as those aren't compatible with SSO or MFA. The "new" Outlook is basically a packaged PWA of the outlook.office.com webapp, in which it is maybe more obvious that the integration is server-side. I'm not sure they are trying to hide how it works, but they are probably looking to shove all that text into an LLM like every other asshole running a service.

To be nit-picky

> most email providers aren't using raw passwords anymore

I strongly doubt you have any valid statistics on this "most". There are many, many small providers out there. None of the e-mail providers I'm aware of (not counting the huge oligopolists) is using SSO or MFA for e-mail.

Thus this assumption does not hold:

> it's more likely they are storing an oauth2 token

@raven667 @nielsk @condalmo

And even if you assumption would hold: Microsoft has full access to your mailbox. Not only it is copying all of your mails to their servers. It could also modify or delete all your messages.
@raven667 @nielsk @condalmo