[kmail2] [Bug 404698] Decryption Oracle based on replying to PGP or S/MIME encrypted emails

Jens Mueller bugzilla_noreply at kde.org
Tue Apr 16 10:06:50 BST 2019


https://bugs.kde.org/show_bug.cgi?id=404698

--- Comment #9 from Jens Mueller <jens.a.mueller+kde at rub.de> ---
Imho, there are no legitimate use cases for `partial encryption` in S/MIME and
PGP/MIME, but it's hard to measure if such emails do exist in the wild. In case
of PGP/Inline, unfortunately, every part is encrypted separately. Note that a
captured PGP/MIME message can be `downgraded` to be interpreted in the context
of PGP/INLINE.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the Kdepim-bugs mailing list