Publications

Publications

[2023] Content-Type: multipart/oracle - Tapping into Format Oracles in Email End-to-End Encryption

[2022] Investigating Expert Users' Strategies to Detect Email Signature Spoofing Attacks

[2021] ALPACA: Application Layer Protocol Confusion – Analyzing and Mitigating Cracks in TLS Authentication

[2021 ]Why TLS is better without STARTTLS: A Security Analysis of STARTTLS in the Email Context

[2020] Mitigation of Attacks on Email End-to-End Encryption

[2020] CORSICA: Cross-Origin Web Service Identification

[2020] Mailto: Me Your Secrets. On Bugs and Features in Email End-to-End Encryption

[2019] Johnny, you are fired!” – Spoofing OpenPGP and S/MIME Signatures in Emails

[2019] Re: What’s Up Johnny?

[2018] Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels

[2018] Attacking Deterministic Signature Schemes Using Fault Attacks