Good point. One of the researchers' tweets[0] was: > You can still disable it in the config. If use S/MIME for sensitive information, disable it for now. whi

Good point. One of the researchers' tweets[0] was: > You can still disable it in the config. If use S/MIME for sensitive information, disable it for now. which would imply that it's not remote code execution, otherwise it would be worth disabling S/MIME whether you use it for sensitive information or not. [0] https://twitter.com/seecurity/status/995914298512887808 https://twitter.com/seecurity/status/995914298512887808