Certainly awful timing, and especially awkward since a prepended img tag was one of the mechanisms for attacking PGP clients as well. That said, the EFF recomm

Certainly awful timing, and especially awkward since a prepended img tag was one of the mechanisms for attacking PGP clients as well. That said, the EFF recommendation turns out to be somewhere between 'overzealous' and 'wrong'. If you're using Protonmail or another solid GPG implementation, the attack is already handled in full by re-encrypting mixed plain/cipher messages and requiring MDC. https://protonmail.com/blog/pgp-vulnerability-efail/ https://protonmail.com/blog/pgp-vulnerability-efail/ https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060334.html https://lists.gnupg.org/pipermail/gnupg-users/2018-May/06033...