3 ms·
Since the exploit depends on sending manipulated emails, I think that 3. and 4. are pretty easy, since it'll look like the email is from a trusted sender (and e
by jakobegger 8y ago
Since the exploit depends on sending manipulated emails, I think that 3. and 4. are pretty easy, since it'll look like the email is from a trusted sender (and encrypted)
- flatline 8y agoThe encrypted messages will not be signed, unless the trusted sender is also the attacker or their key is compromised.
- jakobegger 8y agoDoes Thunderbird verify that the message is signed before displaying images from a whitelisted sender?