3 ms·
> The actual browser itself makes the actual SMTP connection to the Microsoft e-mail host! This is not generally possible, browsers cannot make arbitrary socke
by semiquaver 3y ago
> The actual browser itself makes the actual SMTP connection to the Microsoft e-mail host!
This is not generally possible, browsers cannot make arbitrary socket connections in the way that would be required to reliably communicate with an SMTP server. The article makes clear that the frontend is calling a poorly-coded email-sending API implemented as an HTTP endpoint.
- kazinator 3y agoI see. That's what I would have thought so I was scratching my head; that lack of sandboxing would turn all browsers into horrible attack vehicles, rendering botnets obsolete.