{
  "port": 3659,
  "protocol": "both",
  "service": "apple-sasl",
  "oneLiner": "An Apple SASL authentication port registered in 2003 and absent from modern macOS.",
  "whatItIs": "IANA lists 3659 as apple-sasl, registered by David M. O'Rourke of Apple in January 2003, from the era when Mac OS X Server ran an Open Directory Password Server offering SASL authentication to its mail, file, and directory services. Apple never published a wire specification for it, macOS Server itself is discontinued, and the port does not appear in Apple's current list of ports used by Apple software. A listener here on a modern Mac is something else that took a free port.",
  "exposure": {
    "verdict": "never",
    "note": "Anything genuinely serving SASL is an authentication endpoint; there is no documented transport security here, so keep it internal and prefer a current, documented auth service."
  },
  "checkCommand": "nmap -Pn -sV -p 3659 TARGET",
  "links": [
    {
      "title": "IANA port registry — 3659 (apple-sasl)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=3659",
      "kind": "iana"
    }
  ]
}