I found that this is tracked already here: 
https://bugzilla.mozilla.org/show_bug.cgi?id=1835697

Falko Strenzke schrieb am Dienstag, 15. August 2023 um 13:38:47 UTC+2:

> I would like to report that we realized that even when sending an 
> encrypted encrypted E-Mail between two Thunderbird instances, AEAD is not 
> used in the S/MIME encryption, even though it seems to be supported by NSS. 
> Instead the legacy CBC mode encryption, known to subject to all kind of 
> manipulation attacks, is used. 
>
> - Falko
> -- 
>
> *MTG AG*
> Dr. Falko Strenzke
> Executive System Architect
>
> Phone: +49 6151 8000 24
> E-Mail: falko.s...@mtg.de
> Web: mtg.de <https://www.mtg.de>
>
>
> *MTG Exhibitions – See you in 2023* 
> ------------------------------
>
> <https://community.e-world-essen.com/institutions/allExhibitors?query=true&keywords=mtg>
>  
> <https://www.itsa365.de/de-de/companies/m/mtg-ag> 
>
> MTG AG - Dolivostr. 11 - 64293 Darmstadt, Germany
> Commercial register: HRB 8901
> Register Court: Amtsgericht Darmstadt
> Management Board: Jürgen Ruf (CEO), Tamer Kemeröz
> Chairman of the Supervisory Board: Dr. Thomas Milde
>
> This email may contain confidential and/or privileged information. If you 
> are not the correct recipient or have received this email in error, 
> please inform the sender immediately and delete this email. Unauthorised 
> copying or distribution of this email is not permitted.
>
> Data protection information: Privacy policy 
> <https://www.mtg.de/en/privacy-policy> 
>

-- 
You received this message because you are subscribed to the Google Groups 
"dev-tech-crypto@mozilla.org" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dev-tech-crypto+unsubscr...@mozilla.org.
To view this discussion on the web visit 
https://groups.google.com/a/mozilla.org/d/msgid/dev-tech-crypto/d5fcbbf3-dc1d-4d2a-98ae-ca88055bd7aen%40mozilla.org.

Reply via email to