2018/05/16: Article criticizing the handling of the EFAIL vulnerabilities disclosureRead more
2018/05/16: Timeline of the Efail vulnerabilities disclosures to PGP vendors and usersRead more
EFAIL Usenix paper, released (in a draft version) on may 14, 2018 due to embargo break. It describes the EFAIL attacks (technique: malleability gadgets) to reveal plaintext of emails encrypted with S/MIME and OpenPGP.Read more
2018/05/21: Article on who is concerned by the EFAIL vulnerabilities and why email, in general, isn't securedRead more
2018/05/15: Article going through why PGP isn't "broken" even though vulnerabilities have been found in it.
Reaction to this article available here : https://cva.unifr.ch/content/no...Read more
2018/05/24: Article on EFAIL vulnerability, email vulnerabilities and the patching of those vulnerabilities. It questions the safety of emails in generalRead more
2018/05/14: Article on the story of the EFAIL vulnerabilities concerning OpenPGP and S/MIME encrypted emailRead more
2018/05/14: Comments section under the article of The Register "S/MIME artists: EFAIL email app flaws menace PGP-encrypted chats"Read more
2018/05/17: Matthew Green thoughts on the EFAIL vulnerabilities disclosure, its handling and the future of PGPRead more
2018/05/22: Hanno Böck's thoughts and opinion about the EFAIL vulnerability, OpenPGP and S/MIME,Read more
2018/05/14: Article describing the EFAIL vulnerabilities concerning OpenPGP and S/MIME encrypted emailRead more