Thunderbird and Efail

neandr neandr at gmx.de
Wed May 16 06:43:30 UTC 2018


Would it makes sense to have an easier  method to switch between Simple 
and Original HTML? Maybe a toggle button on the message header area.

Also how about the other note to render/display the Orignal html 
formatted message with an other program which would have no mail access?

Guenter


On 16.05.18 02:59, Ben Bucksch wrote:
> Nomis101 🐝 wrote on 16.05.18 01:31:
>> I assume the S/MIME implementation is affected from Efail? Is this a
>> serious issue for all Thunderbird users who are relying on S/MIME (and
>> sending HTML emails)?
>> https://efail.de
>
>
> Yes.
>
> That said, the attack is an active MITM attack. The attacker needs to 
> modify your emails. You can also detect it. So, it's a crude attack 
> from an attacker's viewpoint.
>
> Good news is that it's simple to mitigate. Simply enable View | 
> Message Body as | Simple HTML, and the attack will no longer work. 
> This feature neutralizes the attack in 2 different ways. If security 
> is important to you, you should enable that anyways, as it neutralizes 
> whole classes of attacks.
>
> Ben
>
>
> _______________________________________________
> tb-planning mailing list
> tb-planning at mozilla.org
> https://mail.mozilla.org/listinfo/tb-planning
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/tb-planning/attachments/20180516/839eb098/attachment.html>


More information about the tb-planning mailing list