# Shifting Cyber Norms: Microsoft security POST-ing to you

DevFeed: [Shifting Cyber Norms: Microsoft security POST-ing to you](<https://devfeed.tech/articles/shifting-cyber-norms-microsoft-security-post-ing-to-you-36538.md>)

Original publisher: [Read original article](<https://berthub.eu/articles/posts/shifting-cyber-norms-microsoft-post/>)

Published: 2025-01-23T11:42:25Z

Content type: opinion

Language: en

Sources: [Bert Hubert's writings](<https://devfeed.tech/sources/bert-hubert-s-writings.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [email](<https://devfeed.tech/topics/email.md>), [Microsoft](<https://devfeed.tech/topics/microsoft.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Single-page application (SPA)](<https://devfeed.tech/topics/spa.md>)

Tags: [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [email](<https://devfeed.tech/tags/email.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [programming](<https://devfeed.tech/tags/programming.md>), [scanners](<https://devfeed.tech/tags/scanners.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

The article argues that Microsoft and other email security scanners now visit links in transmitted email and execute their JavaScript, including requests that trigger POST actions. It reports that this behavior can invalidate single-use passwordless sign-on and email-confirmation links, and discusses changing norms around email inspection and software behavior.

## Source excerpt

tl;dr: Microsoft and other email security scanners will visit the links in email you transmit, and run the JavaScript in those links, including calls that lead to POSTs going out. This used to be unacceptable, since POSTs have side effects. Yet here we are. This breaks even somewhat sophisticated single-use sign-on / email confirmation messages. Read on for how to deal with this, and some thoughts on how we should treat gatekeepers like Microsoft that can randomly break things & get away with it.