4 ms·
Similar vulnerabilities to heartbleed could exist in TCP stacks and mail servers, revealing the contents of unencrypted mail. The reason encrypting things is n
by jewel 12y ago
Similar vulnerabilities to heartbleed could exist in TCP stacks and mail servers, revealing the contents of unencrypted mail.
The reason encrypting things is nice is that it reduces the attack surface. You only have to protect your email at the point of consumption. Taken to extremes, if PGP were ubiquitous then your IMAP account wouldn't need to have a password.
- 0x0 12y agoOn the other hand, it increases the attack surface as you are now exposing all of OpenSSL (or similar) on top of the rest of the stack.