News for hackers. Stuff that matters.

A comment on EFail – Vulnerabilities in end-to-end encryption technologies OpenPGP and S/MIME. Parent comment

Re:EFail – Vulnerabilities in end-to-end encryption technolo... by klez on Monday May 14, 2018 @11:50AM (#17066495)
I'll rephrase what I was trying to say:

If I'm expecting encrypted email, I don't expect it formatted as HTML, so I can just disable its rendering. At which point the attacker can send it any format they want, my mail client just won't render it.

The parent to my comment says this is unlikely, and I don't understand why. Hence my asking (and now I see I phrased it the opposite way).

[ Parent | on HN ]
Re:EFail – Vulnerabilities in end-to-end encryption technolo... by CJefferson on Monday May 14, 2018 @12:09PM (#17066662)
The problem is this seems like fragile security -- most mail clients do render HTML, so better make sure that option never gets set to on, or you are hosed.
[ Parent | on HN ]