> For example suppose your mail server falls over, If token based authentication is affected by this your mail server is doing things very very wrong. ---- I

> For example suppose your mail server falls over, If token based authentication is affected by this your mail server is doing things very very wrong. ---- I'm well aware about all the problems involved when it comes to mail/smtp auth by now. Still username+password auth done by any client for anything but the initial sign-up is a latent security vulnerability even if it's currently tricky to fix. -------- > There absolutely will be a user with an Amiga 1200 using email on a big email service. Do you cut their service off? Yes, if I would be a mail company I most likely would not have any reason to support them tbh. Probably a better example would be outdated outlook versions ;=)