OpenPGP

SigSpoof: Spoofing signatures in GnuPG, Enigmail, GPGTools and python-gnupg (NeoPG blog post)

2018/06/13: Blog post on the "SigSpoof". Marcus Brinkmann found this vulnerability that allows spoofing “signed” messages that are not actually signed. This post proves the vulnerability and shows the medias' reactionsRead more

Encryption? This time it'll be usable, Thunderbird promises (The Register article)

2019/01/04: Article on the developpement of Encryption by ThunderbirdRead more

Statement on Efail research (Gpg4win)

2018/05/17: Gpg4win statement regarding the EFAIL vulnerabilities and its media coverageRead more

What “Efail” Tells Us About Email Vulnerabilities and Disclosure (Lawfare article)

2018/05/24: Article on EFAIL vulnerability, email vulnerabilities and the patching of those vulnerabilities. It questions the safety of emails in generalRead more

Critical Flaws in PGP and S/MIME Tools Can Reveal Encrypted Emails in Plaintext (TheHackerNews article)

2018/05/14: Article on the EFAIL vulnerbilities concerning OpenPGP and S/MIME encrypted emailRead more

"“PGP” can mean a bunch of things"

There are two interesting quotes regarding the question. First, at the very beginning of the article, the author affirm:

"PGP" can mean a bunch of things, from the OpenPGP

...Read more
How is PGP defined?
The PGP Problem (Latacora blog post)
OpenPGP

Negociation as a drawback?

The authors make a bold statement:

If we've learned 3 important things about cryptography design in the last 20 years, at least 2 of them are that negotiation and compatibility

...Read more
What are the pros and cons of standardization?
The PGP Problem (Latacora blog post)
OpenPGP

PGP und S/MIME: So funktioniert Efail (Heise, screenshot)

What's the matter with PGP? (Matthew Green blog post)

2014/08/13: Green's criticisms towards OpenPGPRead more

PGP und S/MIME: E-Mail-Verschlüsselung akut angreifbar (Heise Security article)

2018/05/14: Article on the EFAIL vulnerabilities concerning OpenPGP and S/MIME encrypted emailRead more

By tracking versions? Example with PGP

This history is a very detailed and focused one and I really love the way most information is documented with links. It is a very useful source of primary and secondary documents...Read more

How to write the history of a digital object?
L'histoire de PGP by vie.privee.org
Digital Ethnography
PGP und S/MIME: So funktioniert Efail (Heise article)

2018/05/14: Heise Security article explaining how EFAIL worksRead more

Subscribe to OpenPGP
Need help with PECE?
Join the PECE Slack channel