The Electronic Frontier Foundation (EFF) has announced that it has confirmed some security blanks that reveal PGP encrypted email contents. EFF said in a release that users should uninstall PGP until security gaps are corrected.
Our advice, which reflects that of the researchers, is to immediately deactivate tools that automatically decrypt encrypted emails.
Until the defects described in the document are understood and defined more broadly, you should use security alternatives such as Signal and temporarily stop sending and reading encrypted messages with PGP.
In a tweet, EFF specifically warned users not to decrypt messages they use to encrypt PGP in mail applications.
All details of the defect will be released on Tuesday. One of the researchers who discovered exploit announced with a tweet that there are no credible fixes for this vulnerability.
Meanwhile, EFF has created guides to disable PGP in Outlook, Thunderbird, Enigmail and Apple Mail.
GnuPG's Werner Koch said the warnings were "excessive" and that the EFF had not contacted GnuPG.
"They claim that mail clients that do not properly check for decryption errors run the risk of serving malicious links in HTML messages, so the vulnerability is in the mail clients and not in the protocols," he said. tweet of GnuPG.
Enigmail's Robert Hansen said the EFF publication: "We are not worried in the slightest."
Please note that EFF is not used to false alarms. It is a good idea until the vulnerability is announced, or vulnerabilities, especially if you are using an email client from the ones mentioned above.
For more details, read the EFF publication.
PGP Disabling Guides
___________________
- IBM Deep Learning as a Service: Train your AI
- WebStresser: Europol closed the world's largest DDoS service
- Facebook: We have the social network that we deserve
George is still wondering what he is doing here….
For this reason (and for many other reasons) in the current period, the use of proton mail is imperative.
Note that, sending - receiving secure mail makes sense ONLY when done by proto mail 2 proton mail, as if sent from proton to gmail etc,… papala the encryption and security of communications.
For this reason (and for many other reasons) in the current period, the use of proton mail is imperative.
Note that, sending - receiving secure mail makes sense ONLY when done by proto mail 2 proton mail, as if sent from proton to gmail etc,… papala the encryption and security of communications.