Re: [mailop] Microsoft Office365 blocking non Oauth2 authentication on IMAP and SMTP.

2022-08-19 Thread Christopher Hawker via mailop
Hello Benoit, What mail client is being used, that doesn't support Oauth2? Regards, Christopher Hawker From: mailop on behalf of Benoît Panizzon via mailop Sent: Friday, August 19, 2022 4:41 PM To: mailop@mailop.org Subject: [mailop] Microsoft Office365 blocki

Re: [mailop] Microsoft Office365 blocking non Oauth2 authentication on IMAP and SMTP.

2022-08-19 Thread Andrew C Aitchison via mailop
On Fri, 19 Aug 2022, Christopher Hawker via mailop wrote: Hello Benoit, What mail client is being used, that doesn't support Oauth2? Benoit seems to be talking about "tools" more than "programs" or "apps", so I am not sure that his problem is just mail clients, but likely also includes othe

Re: [mailop] Microsoft Office365 blocking non Oauth2 authentication on IMAP and SMTP.

2022-08-19 Thread Gellner, Oliver via mailop
Hello, IMAP, SMTP etc are still being supported with Office365. What gets disabled is Basic Auth for some services. Microsoft announced the decomission of Basic Authentication three years ago and all tenant administrators have been notified several times in the meantime about this change. Origin

Re: [mailop] Microsoft Office365 blocking non Oauth2 authentication on IMAP and SMTP.

2022-08-19 Thread Stuart Henderson via mailop
On 2022/08/19 09:08, Gellner, Oliver via mailop wrote: > Hello, > IMAP, SMTP etc are still being supported with Office365. What gets > disabled is Basic Auth for some services. Microsoft announced the > decomission of Basic Authentication three years ago and all tenant > administrators have been no

Re: [mailop] Microsoft Office365 blocking non Oauth2 authentication on IMAP and SMTP.

2022-08-19 Thread Vladimir Gabrielescu via mailop
Sorry but I disagree, as someone who manages multiple 365 tenants, including one with 150k users, and one for a small nonprofit, this should not have been a surprise for any administrator of the service. As previously mentioned this was announced years ago and repeatedly communicated. If you car

Re: [mailop] Microsoft 365 - Regular auth for IMAP/SMTP

2022-08-19 Thread Luke Thompson via mailop
Hi, Typically we find IMAP can be authenticated against "normally" once security defaults are disabled. They are working to enforce this onto tenants, so it would be an uphill battle. https://docs.microsoft.com/en-us/microsoft-365/business-premium/m365bp-conditional-access?view=o365-worldwide

Re: [mailop] Microsoft Office365 blocking non Oauth2 authentication on IMAP and SMTP.

2022-08-19 Thread Gellner, Oliver via mailop
On 2022/08/19 12:03, Stuart Henderson wrote: > It would seem sensible for operators who want to require something > stronger than basic authentication to have a way to use TLS with > client certificates as an alternative to OAuth2, it would be a lot more > straightforward to handle on the client si

Re: [mailop] Microsoft Office365 blocking non Oauth2 authentication on IMAP and SMTP.

2022-08-19 Thread Mike Hammett via mailop
Down with big mail! ;-) - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Benoît Panizzon via mailop" To: mailop@mailop.org Sent: Friday, August 19, 2022 1:41:21 AM Subject: [mailop] Microsoft Office3

[mailop] Anyone else seeing Avast AVG doing bad modifications of emails?

2022-08-19 Thread Michael Peddemors via mailop
The reason we are seeing this behavior for 2 antivirus: Both AVG and Avast antivirus are owned and operated by the same company - Avast acquired AVG in 2016. I believe both platforms are using the same cloud proxy system - with the common issue that said cloud proxy is RFC ignorant with regards

Re: [mailop] Anyone else seeing Avast AVG doing bad modifications of emails?

2022-08-19 Thread ml+mailop--- via mailop
On Fri, Aug 19, 2022, Michael Peddemors via mailop wrote: > The reason we are seeing this behavior for 2 antivirus: Both AVG and Can you share which "bad modifications" are made? -- Address is valid for this mailing list only, please do not reply to it directly, but to the list. ___

Re: [mailop] Microsoft Office365 blocking non Oauth2 authentication on IMAP and SMTP.

2022-08-19 Thread Brandon Long via mailop
On Fri, Aug 19, 2022 at 3:06 AM Stuart Henderson via mailop < mailop@mailop.org> wrote: > On 2022/08/19 09:08, Gellner, Oliver via mailop wrote: > > Hello, > > IMAP, SMTP etc are still being supported with Office365. What gets > > disabled is Basic Auth for some services. Microsoft announced the >

Re: [mailop] Anyone else seeing Avast AVG doing bad modifications of emails?

2022-08-19 Thread Michael Peddemors via mailop
On 2022-08-19 09:55, ml+mailop--- via mailop wrote: On Fri, Aug 19, 2022, Michael Peddemors via mailop wrote: The reason we are seeing this behavior for 2 antivirus: Both AVG and Can you share which "bad modifications" are made? Sorry, thought it was clear, they are using bare line feeds o

Re: [mailop] Anyone else seeing Avast AVG doing bad modifications of emails?

2022-08-19 Thread ml+mailop--- via mailop
On Fri, Aug 19, 2022, Michael Peddemors via mailop wrote: > Sorry, thought it was clear, they are using bare line feeds on their > injected headers.. Hmm, I've seen that bug before in some software at $WORK :-( They didn't even notice it until some DKIM verifier finally failed due to that bug. __

Re: [mailop] Microsoft Office365 blocking non Oauth2 authentication on IMAP and SMTP.

2022-08-19 Thread Alan Hodgson via mailop
On Fri, 2022-08-19 at 10:19 -0500, Mike Hammett via mailop wrote: > > I wonder: How do other Microsoft Office365 customers mitigate this > situation? If O365 no longer meets their needs, I guess maybe they'll have to use something different. Or change their needs.

Re: [mailop] Microsoft Office365 blocking non Oauth2 authentication on IMAP and SMTP.

2022-08-19 Thread Jaroslaw Rafa via mailop
Dnia 19.08.2022 o godz. 10:31:32 Brandon Long via mailop pisze: > I won't say that OAUTH is the perfect solution to all of these issues, but > it is definitely an improvement for them. > Could TLS client certs have been issued in place of the tokens in these > schemes? Maybe? Not sure what it > w

Re: [mailop] Microsoft Office365 blocking non Oauth2 authentication on IMAP and SMTP.

2022-08-19 Thread Brandon Long via mailop
On Fri, Aug 19, 2022 at 3:58 PM Jaroslaw Rafa via mailop wrote: > Dnia 19.08.2022 o godz. 10:31:32 Brandon Long via mailop pisze: > > I won't say that OAUTH is the perfect solution to all of these issues, > but > > it is definitely an improvement for them. > > Could TLS client certs have been iss