It was interesting because the article didn’t get too much into the details of it. But anything using Oauth2 like most major emails (eg Gmail) aren’t impacted by this. It sounds like only the ones with user name and password are sent. Without understanding more detail it’s kind of hard to be up-in-arms.
Kinda like youre saying, at some point any email app needs your credentials to get your emails. The app, necessarily, can read your emails.
The author of the article didn’t do a good job explaining the issue imo. How does it “normally” work versus what Microsoft is doing?
So many articles suck these days.
venoft@lemmy.world 11 months ago
It’s a little worse than that. Microsoft copies your password, credentials and all your emails to their server. Future emails then also go through their servers.
If you have a business this probably constitutes a data leak.