1

Using Microsoft Outlook app for Android I could not add an Outlook-IMAP account on some Android tablet for some customer. However, it was no problem to add the same IMAP account to the GMail App, or some other mail Clients on the same tablet. Or to Thunderbird on Windows, even Outlook on Windows worked fine...

I wondered what the heck is going on. updated outlook on android, no change. So i setup an Test-Mail-Server and sniffed the network traffic. Turns out that my device was not talking to the Mail-Server but some Microsoft servers where... what?? got logins to my IMAP from 52.125.138.21 and 52.125.139.100. WHOIS... 52.125.0.0 - 52.127.255.255 -> Microsoft Corporation (MSFT)...

Why are they logging in to my IMAP Server with user and password... why is Andorid-Outlook telling my SECRET password to some servers @ Microsoft... and... do i have to assume they pass my credentials and all mails so some 3Letter agency? It's just stupid to transport all IMAP communication to MS and from there to the tablet.

So the question is: Is there any way to force Outlook on a Android tablet to directly communicate with the IMAP-Server? I set imap.myserver.ch:993 in the advanced settings... but this also leads to MS logging in and get all mails... still no traffic from tablet to IMAP-Server.

I'm useing Oultook Version 4.2025.3 (42025807) on a Galaxy Tab S6 Android Version 10

Improve this question

1 Answer 1

Reset to default
1

Looks like you have not read the the small print before using the
Microsoft Outlook app for Android.

Yes, what you have detected is the way the Outlook Android app works. Outlook is not an IMAP client, instead username and password are transmitted to a cloud server (named "Exchange Online") that saves these info and then logs into your mailbox, does what ever it is supposed to do in background and also allows your Outlook app to access your mailbox as well. See also the official documentation by Microsoft on that topic.

I assume access to IMAP folders is only for backward compatibility. The real target of Outlook app is accessing Outlook.com and cloud based Exchange servers. In this scenario the password is not stored on the Microsoft server, instead a generated token is used for user authentication towards the Exchange server. However all your mail, calendar and contact data still passes the Microsoft cloud servers.

BTW: This app and it's backend has not been developed by Microsoft. Instead Microsoft bought a company named "Acompli" and they are the creator of this system.

Improve this answer
4
  • Hi Robert, thanks a lot for your detailed answer... and no, i didn't read the small print :/
    – DPLW
    Commented Sep 8, 2020 at 15:54
  • Extremely interesting thank you
    – MandyShaw
    Commented Oct 11, 2020 at 12:30
  • The link does not mention IMAP at all. It is clear they are mostly focused on O365; can't really see why they would bother to push IMAP traffic hither and yon, tbh. It's not as if other apps don't manage to handle it direct on Android (and better).
    – MandyShaw
    Commented Oct 11, 2020 at 21:59
  • 1
    @MandyShaw IMAP is not explicitly mentioned, but it belongs implicitly to the methods that do not allow "modern hybrid authentication". And the system was designed by Acompli as it is, may be the primary goal was to built their own cloud based groupware system and access to external mail boxes was originally just planned as some sort of transition period? Who knows - the system is now as it is.
    – Robert
    Commented Oct 12, 2020 at 7:00

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .