Antipope EFAIL

Encyclical

"Nolite Timere PGP". In May 2018 researchers showed how to extract the plaintext of OpenPGP and S/MIME encrypted email by abusing how mail clients handled HTML, and the EFF advised disabling PGP plugins at once. Many experts found the alarm disproportionate: the flaw lay mostly in the clients, and those that honoured GnuPG's integrity check (MDC), standard for nearly eighteen years, were protected. The research was solid and useful; it was the advice to switch everything off that outran it. The encyclical recommends fixing the clients and keeping encryption on.

Saint page: Saint EFAIL