CODE VULNERABILITIES PUT SKIFF EMAILS AT RISK

Summary from the TLDR InfoSec newsletter

The Sonar Research team discovered and responsibly disclosed code vulnerabilities in Skiff's web client that would allow attackers to steal decrypted emails and impersonate victims if they interacted with malicious messages. This article provides technical details of the vulnerabilities found and advice on how to avoid such vulnerabilities in code.