The Electronic Frontier Foundation (EFF) announced that it has confirmed some security gaps which reveal the contents of PGP-encrypted emails. The EFF said in a statement that users should uninstall PGP until the vulnerabilities are fixed.
Our advice, which reflects that of the researchers, is to immediately deactivate tools that automatically decrypt encrypted emails.
Until the flaws described in the document are more widely understood and defined, you should use alternatives security solutions like Signal and temporarily stop sending and reading encrypted messages with PGP.
In a tweet, EFF specifically warned users not to decrypt messages they use to encrypt PGP in mail applications.
All details of the defect will be released on Tuesday. One of the researchers who discovered exploit announced with a tweet that there are no credible fixes for this vulnerability.
Meanwhile, EFF has created guides to disable PGP in Outlook, Thunderbird, Enigmail and Apple Mail.
GnuPG's Werner Koch said the warnings were "excessive" and that the EFF had not contacted GnuPG.
"They claim that mail clients that do not properly check for decryption errors run the risk of serving malicious links in HTML messages, so the vulnerability is in the mail clients and not in the protocols," he said. tweet of GnuPG.
Enigmail's Robert Hansen said the EFF publication: "We are not worried in the slightest."
Let's mention that the EFF is not used to us falses alarms. Until the vulnerability or vulnerabilities are announced, it would be good to be especially careful if you use any of the email clients mentioned above.
For more details, read the EFF publication.
PGP Disabling Guides
___________________
- IBM Deep Learning as a Service: Train your AI
- WebStresser: Europol closed the world's largest DDoS service
- Facebook: We have the social network that we deserve
Therefore (and for many other reasons) in the present period, the use of proton mail is imperative.
Note that, sending - receiving secure mail makes sense ONLY when done by proto mail 2 proton mail, as if sent from proton to gmail etc,… papala the encryption and security of communications.
Therefore (and for many other reasons) in the present period, the use of proton mail is imperative.
Note that, sending - receiving secure mail makes sense ONLY when done by proto mail 2 proton mail, as if sent from proton to gmail etc,… papala the encryption and security of communications.