Skip to content

Comment on Microsoft mishandling example.com

Comments

Why do you need to send a password when using their Autodiscover API? Would Outlook send the respective passwords for each email account to Microsoft?

I suspect they try to login and reverse engineer the IMAP config.

curl -u just requires the field to be there, I suspect. No authentication takes place. You can send any password and the output doesn't change.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.