<div dir="ltr">So this why the EFF is recommending this <a href="https://www.eff.org/deeplinks/2018/05/disabling-pgp-thunderbird-enigmail">https://www.eff.org/deeplinks/2018/05/disabling-pgp-thunderbird-enigmail</a><br></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, May 14, 2018 at 1:24 PM, der.hans <span dir="ltr"><<a href="mailto:PLUGd@lufthans.com" target="_blank">PLUGd@lufthans.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">moin moin,<br>
<br>
lots of news about "new" PGP and S/MIME handling security issues.<br>
<br>
Considering GnuPG addressed it 15 years ago, it doesn't seem to be new :)<br>
<br>
Also, email clients automatically displaying remote content has never<br>
been safe.<br>
<br>
Summary seems to be:<br>
<br>
1. Using text mail rather than html mail mitigates one of the disclosed<br>
issues.<br>
<br>
2. Disabling old ciphers or having a mail client that properly handles<br>
decryption warnings and/or sanitizes messages will work for the other.<br>
<br>
See mailpile's response for the latter.<br>
<br>
<a href="https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060315.html" rel="noreferrer" target="_blank">https://lists.gnupg.org/piperm<wbr>ail/gnupg-users/2018-May/<wbr>060315.html</a><br>
<br>
<a href="https://www.mailpile.is/blog/2018-05-14_PGP_Security_Alert.html" rel="noreferrer" target="_blank">https://www.mailpile.is/blog/2<wbr>018-05-14_PGP_Security_Alert.h<wbr>tml</a><br>
<br>
One good thing to come out of this is that I now know about mailpile :)<br>
<br>
ciao,<br>
<br>
der.hans<span class="HOEnZb"><font color="#888888"><br>
-- <br>
#  <a href="https://www.LuftHans.com" rel="noreferrer" target="_blank">https://www.LuftHans.com</a>   <a href="https://www.PhxLinux.org" rel="noreferrer" target="_blank">https://www.PhxLinux.org</a><br>
#  Eternal vigilance is the price of liberty. -- Thomas Jefferson<br>
------------------------------<wbr>---------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.or<wbr>g</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" rel="noreferrer" target="_blank">http://lists.phxlinux.org/mail<wbr>man/listinfo/plug-discuss</a></font></span></blockquote></div><br></div>