News for hackers. Stuff that matters.

A comment on Thunderbird stored OpenPGP secret keys without master password protection.

Re:Thunderbird stored OpenPGP secret keys without master pas... by akerl_ on Thursday May 20, 2021 @06:05PM (#27228017)
Am I reading correctly that ~“GPG private keys were stored unencrypted” and ~“messages could be modified to include non-encrypted chunks, which the client displayed without indicating the distinction” both count as low-severity?
[ Parent | on HN ]
Re:Thunderbird stored OpenPGP secret keys without master pas... by Egoist on Friday May 21, 2021 @04:16AM (#27231633)
I don’t know what counts as high severity if that’s considered low.
[ Parent | on HN ]
Re:Thunderbird stored OpenPGP secret keys without master pas... by methodsignature on Friday May 21, 2021 @05:48AM (#27232111)
Probably high for them are usage issues, like broke buttons in their UI or chopped text.
[ Parent | on HN ]