5.1 Security Considerations for Implementers

There are no special security considerations specific to this specification. It is recommended that clients perform an Autodiscover request by using this protocol over HTTPS (HTTP with SSL).

It is also recommended that a server not answer Autodiscover queries unless the Autodiscover client has been authenticated with the Autodiscover server.