Signing Oracles with kmail

[Albert Astals Cid]

El dilluns, 13 de maig de 2019, a les 0:58:54 CEST, Sandro Knauß va escriure:
> Hey,
> 
> I finally fixed 404698 (Decryption Oracles) within 5.11.2. 

Awesome work!

Should we release our own advisory? Or at this point that this is all public just let it be?

> But the paper [1] not 
> only showed how to be a Decryption Oracles also showed a way to be a Signing 
> Oracles by using html stuff. See appendix B. Does anyone looked at the  
> blinding/conditional options and if we can improve the situation?

I don't understand appendix B. Is it only a list of CSS stuff KMail supports? 

Cheers,
  Albert

> 
> sandro
> 
> [1] https://arxiv.org/ftp/arxiv/papers/1904/1904.07550.pdf
> 
> 
> 
>