Re: [Autocrypt] [openpgp-email] Efail - Possible Measures?

2018-05-21 Thread Bart Butler via Gnupg-users
> PGP/INLINE is handled only if the pgp > data is the very first non-whitespace content, otherwise it won't be > decrypted. ^ This is exactly what ProtonMail does as well. Sent from ProtonMail, encrypted email based in Switzerland. ‐‐‐ Original Message ‐‐‐ On May 19, 2018 9:47 AM, Patr

Re: [openpgp-email] Efail - Possible Measures?

2018-05-19 Thread Vincent Breitmoser
(Also cross-posting to Autocrypt) Patrick Brunschwig(patr...@enigmail.net)@Sat, May 19, 2018 at 06:47:08PM +0200: > In the light of the Efail vulnerability I am asking myself if it's > really needed to decrypt non-regular types of emails at all. In other > words, should we decrypt a multipart/encr