How To Protect PGP Messaging From EFAIL Attack

[email protected] Fri, 14 Oct 2022 17:15:37 -0500
Newsgroups alt.privacy,alt.computer.security
Organization NewsgroupDirect
Message-ID <[email protected]>
Mitigations

Here are some strategies to prevent EFAIL attacks:

Short term: No decryption in email client. The best way to prevent
EFAIL attacks is to only decrypt S/MIME or PGP emails in a separate
application outside of your email client. Start by removing your
S/MIME and PGP private keys from your email client, then decrypt
incoming encrypted emails by copy&pasting the ciphertext into a
separate application that does the decryption for you. That way, the
email clients cannot open exfiltration channels. This is currently the
safest option with the downside that the process gets more involved.

Entire Article Is Here:

https://efail.de/