<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Would it makes sense to have an easier method to switch between
Simple and Original HTML? Maybe a toggle button on the message
header area.</p>
<p>Also how about the other note to render/display the Orignal html
formatted message with an other program which would have no mail
access?</p>
<p>Guenter<br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 16.05.18 02:59, Ben Bucksch wrote:<br>
</div>
<blockquote type="cite"
cite="mid:6bf6c841-b093-ee70-35f2-561436e9e208@beonex.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<div class="moz-cite-prefix">Nomis101 🐝 wrote on 16.05.18 01:31:<br>
</div>
<blockquote type="cite"
cite="mid:df090129-b2c5-82d6-e883-a87386edc4f7@web.de">
<pre wrap="">I assume the S/MIME implementation is affected from Efail? Is this a
serious issue for all Thunderbird users who are relying on S/MIME (and
sending HTML emails)?</pre>
</blockquote>
<blockquote type="cite"
cite="mid:df090129-b2c5-82d6-e883-a87386edc4f7@web.de">
<pre wrap=""><a class="moz-txt-link-freetext" href="https://efail.de" moz-do-not-send="true">https://efail.de</a></pre>
</blockquote>
<p><br>
</p>
<p>Yes.</p>
<p>That said, the attack is an active MITM attack. The attacker
needs to modify your emails. You can also detect it. So, it's a
crude attack from an attacker's viewpoint.</p>
<p>Good news is that it's simple to mitigate. Simply enable View |
Message Body as | Simple HTML, and the attack will no longer
work. This feature neutralizes the attack in 2 different ways.
If security is important to you, you should enable that anyways,
as it neutralizes whole classes of attacks.</p>
<p>Ben<br>
</p>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
tb-planning mailing list
<a class="moz-txt-link-abbreviated" href="mailto:tb-planning@mozilla.org">tb-planning@mozilla.org</a>
<a class="moz-txt-link-freetext" href="https://mail.mozilla.org/listinfo/tb-planning">https://mail.mozilla.org/listinfo/tb-planning</a>
</pre>
</blockquote>
</body>
</html>