3 ms·

There’s a big difference between password reset rules, and giving third-parties access to emails and calendar. There is nothing draconian about restricting IMA

by yunohn 5y ago

There’s a big difference between password reset rules, and giving third-parties access to emails and calendar. There is nothing draconian about restricting IMAP - any app could exfiltrate confidential emails once granted access. It’s a very sane rule to disallow everything except webmail or first party apps.

beprogrammed 5y ago
It's a terrible process for the users. And as we can see what did it get them, a third party logging into there webmail. The service is protected with a username and password, didn't matter if it was IMAP or webmail.
- yunohn 5y ago
  Of course it does matter! Webmail is quite restricted and optimized for viewing and replying to emails. IMAP is great for that, while also facilitating exporting (exfiltrating) the entire mailbox.
- analognoise 5y ago
  An employee who redirects company emails to get around a security rule becomes an ex-employee very quickly.