[IPP] IPP Encrypted Jobs and Documents: Maybe Not Dead Yet

[IPP] IPP Encrypted Jobs and Documents: Maybe Not Dead Yet

Michael Sweet msweet at apple.com
Mon Jun 4 12:01:14 UTC 2018


All,

The PGP folks have been discussing the EFAIL paper:

    https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060315.html

In short, PGP has supported a "MDC" mode which is used to provide protection similar to GCM, and email clients are ignoring warnings (which IMHO should be hard PGP errors unless the user explicitly says to override the checks) and not validating multi-part MIME messages.

It *does* look like S/MIME is still compromised for the time being, but perhaps we can still move forward just using PGP (which was the original plan anyways...)

_________________________________________________________
Michael Sweet, Senior Printing System Engineer



More information about the ipp mailing list