Newly discovered vulnerabilities bad news for PGP

[exile360]

More info:

https://motherboard.vice.com/en_us/article/3k4nd9/pgp-gpg-efail-vulnerability
https://www.eff.org/deeplinks/2018/05/attention-pgp-users-new-vulnerabilities-require-you-take-action-now
https://www.eff.org/deeplinks/2018/05/not-so-pretty-what-you-need-know-about-e-fail-and-pgp-flaw-0
https://efail.de/

In a nutshell, common implementations of PGP in many email clients have been compromised by this vulnerability and if anyone is able to get copies of your email messages (the encrypted copies stored in your email client or online in the servers that keep their backups etc.) then they may be able to trick your email client into decrypting them and sending the decrypted content directly to them as though they were you reading your own messages.  This means the could potentially gain access to your messages without necessarily needing to crack your password or other security measures required to access and read your email.

[exile360]

By the way, something for Thunderbird users (as I happen to be one myself):

https://blog.mozilla.org/thunderbird/2018/05/efail-and-thunderbird/