so... about efail. the latest Enigmail version contains a few Mitigations. They don't work. I found a trivial bypass. So to be clear: efail is still exploitable with latest Enigmail+Thunderbird and default settings.
Show this thread
Are you using a different exfiltration leak? As far as I can tell, the one in the Efail (link rel="preconnect") is plugged in the current version of Thunderbird.
