5.1 Security Considerations for Implementers
There are no special security considerations specific to
this specification. It is recommended that clients perform an Autodiscover
request by using this protocol over HTTPS (HTTP with SSL).
It is also recommended that a server not answer Autodiscover
queries unless the Autodiscover
client has been authenticated with the Autodiscover server.