Ask HN: New Outlook` sends everything through Microsoft Servers

We talked about it in 2023

Windows 11 Update 23H2 is stealing users' IMAP credentials (666 points, 278 comments) https://news.ycombinator.com/item?id=38212453

And 2024

Microsoft's new Outlook client moves your email to the cloud (2023) (162 points, 131 comments) https://news.ycombinator.com/item?id=41666945

### Inflammatory too (2023):

Microsoft lays hands on login data: Beware of the new Outlook (231 points, 113 comments) https://news.ycombinator.com/item?id=38219568

New Outlook sends passwords, mails and other data to Microsoft (150 points, 25 comments) https://news.ycombinator.com/item?id=38233694

Microsoft steals access data: Beware of the new Outlook (161 points, 40 comments) https://news.ycombinator.com/item?id=38217457

Yep, it's been like that for many years. Well before the pandemic. First noticed when it started triggering our automated incident response systems. Everything is proxied through distributed MSFT proxies.

As far as I know, there is no way to turn it off and "regular" functionality doesn't even exist in the mobile apps anymore. The Outlook mobile app itself is a basic proxy client. I believe the new Outlook is now, or is in the process of becoming the same.

This is not a novel situation for Microsoft. From 2015:

https://www.securityweek.com/researcher-calls-out-microsoft-...