3 ms·
I know we’ve gone back and forth about this before, but EFAIL was caused by a major deficiency in PGP. PGP tees up failure modes like this, as evidenced by the
by akerl_ 5y ago
I know we’ve gone back and forth about this before, but EFAIL was caused by a major deficiency in PGP. PGP tees up failure modes like this, as evidenced by the fact that the vast majority of implementations all suffered from the same issue.
Edit: Hilariously, I went to look up the prior thread and it involves you calling EFAIL a hoax: https://news.ycombinator.com/item?id=21985303 https://news.ycombinator.com/item?id=21985303
- upofadown 5y agoWhat I actually said: >If that is true (and there is evidence that it was) then the whole thing was just a hoax, _at least as presented_. I suppose this is an example of the perils of attempting to be nuanced on the internet. The EFAIL paper is great work. I recently referenced it in an article I wrote. The group involved has subsequently done other good work in the messaging space I am interested in. I shall go and update the article to be even more explicit on this point. Thanks for the assistance...