It's been nearly three weeks since the publication of Efail, a critical set of attacks against PGP/GPG-encrypted emails that was so hard to mitigate that EFF's recommendation was to stop using it for mail altogether until a solution could be worked out.
Efail is still a serious risk, but progress has been made. EFF has published some guidance on how to assess if using GPG/PGP now will protect you or make you more vulnerable, and how to use encrypted email in a way that protects you as much as possible from Efail attacks.
Thunderbird and Enigmail’s developers have been working on ways to protect against the EFAIL vulnerabilities. As of version 2.0.6 (released Sunday May 27), Enigmail has released patches that defend against all known exploits described in the EFAIL paper, along with some new ones in the same class that other researchers were able to devise, which beat earlier Enigmail fixes. Each new fix made it a little harder for an attackerto get through Enigmail’s defenses. We feel confident that, if you update to this version of Enigmail (and keep updating!), Thunderbird users can turn their PGP back on.
But, while Enigmail now defends against most known attacks even with HTML on, the EFAIL vulnerability demonstrated just how dangerous HTML in email is for security. Thus, we recommend that Enigmail users also turn off HTML by going to View > Message Body As > Plain Text.
How To Turn PGP Back On As Safely As Possible
[Erica Portnoy and Danny O'Brien/EFF Deeplinks]
Leaked images, many of them graphic nude photos, were from imaging firm NextMotion in France
Researchers at MIT say the voting app Voatz, which is being used by at least 4 states in the 2020 elections, has major security flaws that could allow an attacker to intercept and alter votes, while making voters think their votes have been cast correctly, or trick the votes server into accepting connections from an […]
White House plans to divert $3.8 billion from DoD to build Trump’s long-promised wall along the U.S.-Mexico border, for which he lied that Mexico would pay
You kill it at the gym all week, your nutrition is dialed in, and you’re drinking so much water that your spare time is spent walking back and forth to the bathroom (way to get those steps in!)—so how do you take things to the next level? By focusing on recovery. A proper post-workout routine, […]
Everybody wears socks, even presidents, but not everybody wears sophisticated, ultra-comfortable socks made with bamboo yarn that offers softness, ventilation, and durability. So with all these DeadSoxy socks on sale for Presidents’ Day, why not use this opportunity to make those hard-working feet of yours happier than they’ve ever been? With styles for work and […]
If you’re looking to read more in 2020, you probably wish you had more time to get that done. Well, we can’t create more hours in the day (we’re mad about it too), but we can help you maximize those hours. Catch up on that book list and get ahead of the game when you […]