[chiglug] EFF: Temporally Stop Using PGP for Encrypted E-mail

[Freddy Martinez]

If you need to continue to use PGP, there are steps you can take on your
mail client that disables most of the attack service. You can see them at
the end the SecureDrop advisory.

https://securedrop.org/news/security-advisory-securedrop-and-efail-vulnerability/
On Mon, May 14, 2018 at 6:05 PM eviljoel <eviljoel at linux.com> wrote:

> Greetings,
>
> There is a newly discovered vulnerability in PGP that allows attackers
> to decrypted prior messages under certain conditions. The Electronic
> Frontier Foundation (EFF) is recommending people stop using PGP for
> encrypted communications until the problem has been fixed and the fix
> has had time to be adopted by most users. I agree with their
> recommendation. The EFF describes the vulnerability here:
>
>
> https://www.eff.org/deeplinks/2018/05/not-so-pretty-what-you-need-know-about-e-fail-and-pgp-flaw-0
>
> I kinda disagree with the EFF's tone in this e-mail. While Signal is a
> great platform for text messaging and instant messaging, it really isn't
> a replacement for e-mail. PGP encrypted E-mail works better with
> threaded discussions and doesn't suffer from a single point of failure
> like Signal does. Coming up with a new, decentralized discussion
> platform with the same adoption rate of PGP/e-mail will be extremely
> difficult. I hope that this problem is fixed quickly and doesn't mark
> the end of PGP e-mail encryption.
>
> Sincerely,
> eviljoel
>
> --
> Let me teach you encrypted e-mail. eviljoel's PGP fingerprint:
> A2BE 2D12 24D1 67CA 8830  DDE7 DFB3 676B 196D 6430
>
> _______________________________________________
> discuss mailing list
> discuss at lists.chicagolug.org
> https://lists.chicagolug.org/mailman/listinfo/discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.chicagolug.org/pipermail/discuss/attachments/20180514/a9a6ec1d/attachment-0002.html>