Yep, it's been like that for many years. Well before the pandemic. First noticed when it started triggering our automated incident response systems. Everything is proxied through distributed MSFT proxies.
As far as I know, there is no way to turn it off and "regular" functionality doesn't even exist in the mobile apps anymore. The Outlook mobile app itself is a basic proxy client. I believe the new Outlook is now, or is in the process of becoming the same.
We talked about it in 2023
Windows 11 Update 23H2 is stealing users' IMAP credentials (666 points, 278 comments) https://news.ycombinator.com/item?id=38212453
And 2024
Microsoft's new Outlook client moves your email to the cloud (2023) (162 points, 131 comments) https://news.ycombinator.com/item?id=41666945
### Inflammatory too (2023):
Microsoft lays hands on login data: Beware of the new Outlook (231 points, 113 comments) https://news.ycombinator.com/item?id=38219568
New Outlook sends passwords, mails and other data to Microsoft (150 points, 25 comments) https://news.ycombinator.com/item?id=38233694
Microsoft steals access data: Beware of the new Outlook (161 points, 40 comments) https://news.ycombinator.com/item?id=38217457
Okay, I'm just a bit suprised that I missed this.
Yep, it's been like that for many years. Well before the pandemic. First noticed when it started triggering our automated incident response systems. Everything is proxied through distributed MSFT proxies.
As far as I know, there is no way to turn it off and "regular" functionality doesn't even exist in the mobile apps anymore. The Outlook mobile app itself is a basic proxy client. I believe the new Outlook is now, or is in the process of becoming the same.
This is not a novel situation for Microsoft. From 2015:
https://www.securityweek.com/researcher-calls-out-microsoft-...