Insecure auto config over http

2 years ago · e4d3e8637e
parent dc814cffb9
commit e4d3e8637e
1 changed files with 3 additions and 1 deletions
--- a/app/src/extra/java/eu/faircode/email/Misc.java
+++ b/app/src/extra/java/eu/faircode/email/Misc.java
@ -27,7 +27,9 @@ public class Misc {
    public static List<String> getISPDBUrls(String domain, String email) {
        return Collections.unmodifiableList(Arrays.asList(
                "https://autoconfig." + domain + "/mail/config-v1.1.xml?emailaddress=" + email,
-                "https://" + domain + "/.well-known/autoconfig/mail/config-v1.1.xml?emailaddress=" + email
+                "https://" + domain + "/.well-known/autoconfig/mail/config-v1.1.xml?emailaddress=" + email,
+                "http://autoconfig." + domain + "/mail/config-v1.1.xml?emailaddress=" + email,
+                "http://" + domain + "/.well-known/autoconfig/mail/config-v1.1.xml?emailaddress=" + email
        ));
    }
 }