Viewing profile — noguespi

You won't be able to decrypt email just by intercepting them

Because the vulnerability is just about adding HTML tags which will send decrypted content to a remote server controlled by attacker. Example : If you disable remote content, it ca…

A lot of buzz for a not so critical vulnerability. Well it is critical but very hard to exploit because : 1. Hacker need to intercept the encrypted email. 2. HTML tags/remote conte…