Re: Emacs/Mutt and Efail or OpenPGP is safer than S/MIME?

[Lars Ingebrigtsen]

Richard Stallman <address@hidden> writes:

> Does the exploit depend on Javascript code that the MUI will execute?

No, it just depends in <img src="http://attacker.org/"; in various
scenarios (either embedded at the start of the PGP-encrypted message
itself (which is possible due to certain deficiencies in the format)),
or due to mishandling by certain mail user agents of multipart/mixed,
where it would concatenate various parts before parsing the resulting
mess as one HTML message.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no