EFAIL bundle

Artifacts

Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels

EFF : Attention PGP Users New Vulnerabilities Require You To Take Action Now (EFF article)

PGP und S/MIME abschalten (Golem article)

Major eFail Vulnerability Exposes PGP Encrypted Email -- UPDATED (Forbes article)

Verschlüsselte E-Mails sind nicht sicher (Süddeutsche article)

Critical Flaws in PGP and S/MIME Tools Can Reveal Encrypted Emails in Plaintext (TheHackerNews article)

Efail or OpenPGP is safer than S/MIME (W. Koch email)

#EFail - the security industry and the importance of nuance (HackDefense article)

Encrypted Email Has a Major, Divisive Flaw (Wired article)

S/MIME artists: EFAIL email app flaws menace PGP-encrypted chats (The Register article)

PGP und S/MIME: E-Mail-Verschlüsselung akut angreifbar (Heise Security article)

No, PGP is not broken, not even with the Efail vulnerabilities (Protonmail)

A unified timeline of Efail PGP disclosure events

Efail: What A Disclosure FAIL That Was! (RBS article)

Statement on Efail research (Gpg4win)

Email Is Dangerous (The Atlantic article)

efail: Outdated Crypto Standards are to blame (Hanno's blog)

Die wichtigsten Fakten zu Efail (Golem article)

What “Efail” Tells Us About Email Vulnerabilities and Disclosure (Lawfare article)

How To Turn PGP Back On As Safely As Possible (EFF article)

HTML MAils have no Security Concept and are to blame (Hanno's blog)

Was the Efail disclosure horribly screwed up? – A Few Thoughts on Cryptographic Engineering (blog post)

Encryption? This time it'll be usable, Thunderbird promises (The Register article)

Sebastian Schinzel Tweet about EFAIL vunlerability

License

Contributors

Sylvain Besençon

Contributed date

April 12, 2019 - 5:35pm

Critical Commentary

Bundle regrouping artifacts related to EFAIL

Group Audience

OpenPGP

Tags

Efail

OpenPGP

S/MIME

vulnerability disclosure

security vulnerability

email