Last month we turned off Basic auth in Exchange Online for many customers. We’ve protected millions of users from the risks associated with using this legacy form of authentication to access their da...
Updated Nov 16, 2022
Version 1.0
Blog Post
Codepoet80
Where are you seeing that they will disable SMTP by January? We did have to manually allow accounts to send via SMTP and i think that was an appropriate solution.
It takes time and development away from modern protocols when they are forever stuck patching security concerns. If you have older devices you should be furious with the device manufacturers for not updating their firmware/software to be compatible with secure technology.
Allowing tenants to decide sometimes is typically a good thing, but if your e-mail is vulnerable you put others at risk because you'll eventually become a spam bot for experienced hackers.To be fair, they have been warning this was coming for AT-LEAST 2 years so any devices purchased in the last 2 years is on the buyer.
Not like Microsoft want's to do this but last September over 100,000 windows accounts were compromised because of the outdated security in auto discovery. Everytime they patch it a new exploit is discovered within days. There's only so much patching you can do.
TL;DR, i don't blame Microsoft (for this one atleast) i blame sharp and device manufacturers for not coming up with a solution. Also not like Microsoft is the only e-mail provider they have no control over other providers.