3 ms·
Claiming that EFAIL somehow showed a weakness on the part of PGP and S/MIME is like saying that a caretaker that lets burglars into their tenant's apartment is
by upofadown 7y ago
Claiming that EFAIL somehow showed a weakness on the part of PGP and S/MIME is like saying that a caretaker that lets burglars into their tenant's apartment is an example of bad lock design. Sure the lock maker could of removed the ability to use a master key but that is simply not a reasonable thing to suggest.
- tptacek 7y agoI can't follow this analogy. Claiming that Efail showed weakness on the part of PGP is like claiming that cryptosystems should be designed not to release unauthenticated plaintext to callers, and that the "authenticated/unauthenticated" status of a message shouldn't be communicated out of band. You know, like how all modern AEAD cryptography works.