Microsoft reforms Exchange Online and Server SE

Microsoft has announced that it will make several significant changes to Exchange Online and Exchange Server SE. These changes aim to improve the functionality and security of the platforms and promote integration with modern technologies. A central element of these reforms is the end of Exchange Web Services (EWS), which will have far-reaching implications for how users and third-party apps access mailboxes.

With the abolition of EWS, access to mailboxes will now occur through the Microsoft Graph API. This API provides a unified interface for accessing various Microsoft services and enables seamless integration into modern applications. The transition to the Graph API affects not only users but also third-party apps that access Exchange data. Developers will need to adjust their applications to support the new API.

New Security Standards in Transport

In addition to the changes in mailbox access, Microsoft will also introduce new security standards in the transport area. These standards include DNSSEC (Domain Name System Security Extensions), DANE (DNS-based Authentication of Named Entities), and MTA-STS (Mail Transfer Agent Strict Transport Security). These technologies are intended to enhance the security of email transmissions and reduce the risk of man-in-the-middle attacks.

DNSSEC ensures the integrity of DNS data by using digital signatures. DANE allows TLS certificates to be verified via DNS, which increases the authenticity of email servers. MTA-STS, on the other hand, ensures that email servers communicate only over secure connections, further improving the security of email communication.

The introduction of these new standards is part of Microsoft's comprehensive strategy to enhance the security infrastructure of its services. Companies using Exchange Online and Exchange Server SE are encouraged to prepare for these changes and adjust their systems accordingly. The implementation of these security measures is expected to take place in the coming months.

The transition to the Graph API and the new security standards are not just technical adjustments but also part of a larger trend in software development. More and more companies are relying on APIs to integrate their services and improve interoperability between different platforms. Microsoft is following this trend and positioning itself as a leader in providing modern, secure, and user-friendly solutions.

The changes to Exchange Online and Exchange Server SE are part of Microsoft's ongoing effort to adapt its products to the ever-changing demands of users and technology. The migration to modern APIs and the introduction of stricter security standards are steps aimed at enhancing the user experience while increasing security. Companies should be aware of the upcoming changes and take appropriate measures to ensure a smooth transition.

The exact timelines for the implementation of these changes have not yet been released by Microsoft; however, the first steps are expected to occur in the near future. Companies that rely on Exchange Online and Exchange Server SE should stay informed about the latest developments to ensure they can meet the new requirements in a timely manner.