Interesting. I was not aware of this particular issue. Is this it? * https://dev.gnupg.org/T3981 https://dev.gnupg.org/T3981 As mentioned in the discussion:

Interesting. I was not aware of this particular issue. Is this it? * https://dev.gnupg.org/T3981 https://dev.gnupg.org/T3981 As mentioned in the discussion: >Actually this is not related to the mentioned CVE because the issue we are talking about has not been tested by them. So it appears that the EFAIL people could of prevented MDC from thwarting their attack if they had used a really old cypher. So, OK I will concede that EFAIL at least inspired a change in GPG. My original statement that GPG required no changes as a result of EFAIL is still correct as stated though. We are still quibbling here. I don't think that S/MIME was deficient in any way with respect to EFAIL either. So all this discussion about MDC is still pointless to me.