[GH-ISSUE #344] Security: Johnny, you are fired! #297

New issue

Open

opened 2026-02-25 21:34:40 +03:00 by kerem · 1 comment

kerem commented

2026-02-25 21:34:40 +03:00

Owner

Originally created by @dumblob on GitHub (May 8, 2019).
Original GitHub issue: https://github.com/cypht-org/cypht/issues/344

Originally assigned to: @Danelif on GitHub.

🗣 Suggestion

Recently I stumbled upon a paper “Johnny, you are fired!” – Spoofing OpenPGP and S/MIME Signatures in Emails evaluating few similar attack vectors on encrypted email communication. I think it's worth taking a look at as according to their findings (see Table 2 and onward) it seems affect vast majority of MUAs (standalone as well as web ones).

I didn't have time to evaluate Cypht for these vulnerabilities, but I think it should be done 😉.

Originally created by @dumblob on GitHub (May 8, 2019). Original GitHub issue: https://github.com/cypht-org/cypht/issues/344 Originally assigned to: @Danelif on GitHub. ## 🗣 Suggestion Recently I stumbled upon a paper [“Johnny, you are fired!” – Spoofing OpenPGP and S/MIME Signatures in Emails](https://github.com/RUB-NDS/Johnny-You-Are-Fired/blob/master/paper/johnny-fired.pdf ) evaluating few similar attack vectors on encrypted email communication. I think it's worth taking a look at as according to their findings (see `Table 2` and onward) it seems affect **vast majority of MUAs** (standalone as well as web ones). I didn't have time to evaluate Cypht for these vulnerabilities, but I think it should be done :wink:.