Efail or OpenPGP is safer than S/MIME

[Patrick Brunschwig]

On 17.05.18 10:07, Werner Koch wrote:
> On Thu, 17 May 2018 08:59, patrick at enigmail.net said:
> 
>> Within 12 hours after the release I got 5 bug reports/support requests
> 
> Kudos to Enigmail for acting as our guinea pig.  I implemented the same
> thing in GPGME this morning (see my mail to enigmail users).
> 
> What shall we do now?  Provide a separate tool to decrypt and clean HTML
> messages or add a tool to Enigmail to do just this?

Good question... Thunderbird is working on fixing the HTML display
issue. But I think we should really start enforcing users to enable MDC.
I therefore would prefer keeping the barrier high. In any case, this is
nothing that I could implement with a week or two.

-Patrick



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20180517/7a713bff/attachment.sig>