My school supplies an email address for its students. To connect to their email server, no authentication is needed for the outgoing mail server. So no user name, or password is needed and no SSL/TLS is used (and it's port 25). However incoming email uses SSL and requires authentication.
I am not very knowledgeable about email security. What practice risks does this present to a user? I am guessing it makes it easy for anyone to forge an email address. But does it make it easy for a message to be intercepted and red by a third party? I know it can be used for spam relay, though I'm more concerned about how a legitimate user can be compromised.
If relevant I wouldn't be connecting to the email from the campus internet.