How To Protect PGP Messaging From EFAIL Attack
[email protected] Fri, 14 Oct 2022 17:15:37 -0500
| Newsgroups | alt.privacy,alt.computer.security |
|---|---|
| Organization | NewsgroupDirect |
| Message-ID | <[email protected]> |
Mitigations Here are some strategies to prevent EFAIL attacks: Short term: No decryption in email client. The best way to prevent EFAIL attacks is to only decrypt S/MIME or PGP emails in a separate application outside of your email client. Start by removing your S/MIME and PGP private keys from your email client, then decrypt incoming encrypted emails by copy&pasting the ciphertext into a separate application that does the decryption for you. That way, the email clients cannot open exfiltration channels. This is currently the safest option with the downside that the process gets more involved. Entire Article Is Here: https://efail.de/