Cloud security experts at Hornetsecurity dispute headlines questioning email standards

[Big Head Tech]

Source: https://www.prnewswire.com/news-releases/cloud-security-experts-at-hornetsecurity-dispute-headlines-questioning-email-encryption-standards-300649824.html

 

An email cloud security company Hornetsecurity is disputing the claims about #EFail. 

 

Quote

 

This kind of unsubstantiated exaggeration doesn't help the cause of increasing the wider use of encryption and providing better overall security," Hornetsecurity CEO Oliver Dehning said. "Individuals and institutions that claim to want to improve IT security have done a disservice in this case by creating hysteria in numerous misleading articles and in other unsubstantiated headlines related to eFail.

 

 

 

Basically, he is saying that the news outlets are misleading the public in that these encryption types have been hacked and he would be correct.  PGP and SMIME encryption are not the issue.  It is the mail clients/plug-ins as well as compromised mailed servers.  Any company that is encrypting/decrypting from the client/plugin side or autodecrypt software should probably stop.  Plug-ins are hacked and left vulnerable all the time cough "flash". 

 

From further reading on their website, they encrypt from policies at their secure infrastructure rather than from the client/plug-in or even mail server level.  This not only allows for a much higher level of protection, but makes them immune to this vulnerability.  Frankly, with the amount of high level cloud solutions out there, there is no reason to be utilizing older and outdated ways of encryption.

[AlTech]

They're not wrong. The tech media didn't report on the right story. PGP email encryption is fine.

 

It's just email clients which are not.