<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Nomis101 🐝 wrote on 16.05.18 01:31:<br>
</div>
<blockquote type="cite"
cite="mid:df090129-b2c5-82d6-e883-a87386edc4f7@web.de">
<pre wrap="">I assume the S/MIME implementation is affected from Efail? Is this a
serious issue for all Thunderbird users who are relying on S/MIME (and
sending HTML emails)?</pre>
</blockquote>
<blockquote type="cite"
cite="mid:df090129-b2c5-82d6-e883-a87386edc4f7@web.de">
<pre wrap=""><a class="moz-txt-link-freetext" href="https://efail.de">https://efail.de</a></pre>
</blockquote>
<p><br>
</p>
<p>Yes.</p>
<p>That said, the attack is an active MITM attack. The attacker
needs to modify your emails. You can also detect it. So, it's a
crude attack from an attacker's viewpoint.</p>
<p>Good news is that it's simple to mitigate. Simply enable View |
Message Body as | Simple HTML, and the attack will no longer work.
This feature neutralizes the attack in 2 different ways. If
security is important to you, you should enable that anyways, as
it neutralizes whole classes of attacks.</p>
<p>Ben<br>
</p>
</body>
</html>