TL;DR
It is concluded that delegating cryptographic operations to a gateway undermines the end-to-end security model that PGP and S/MIME were designed to provide and introduces exploitable features in how the security status of emails is communicated.
This review synthesizes the evolution, security concerns, and deployment practices of SMTP, POP3, and IMAP, offering a holistic perspective on their current state and future trajectory and aims to inform researchers, practitioners, and policymakers about the strengths, limitations, and opportunities for advancing secur...
With the increasing capabilities of Large-Language-Models (LLMs) and LLM-based agents, users are increasingly using them to solve everyday problems, such as answering e-mails or providing programming support. Existing work has extensively investigated security and privacy risks, such as prompt injections and the disclo...
This paper presents PreAcher, a system architecture that incorporates third-party Content Delivery Networks (CDNs) into the password authentication process and offloads the authentication workload to CDNs without divulging the passwords to them.
Language model agents are increasingly deployed to automate everyday digital chores from managing emails and social media to handling banking and bills allowing users to step away from supervision. However, this capability also exposes sensitive information to phishing. Safe execution requires distinguishing malicious...
This work presents TENET, a purpose-built auditing tool whose design decisions are grounded in the structural properties of the secrets targeted and empirically validated against a ground-truth dataset, and proposes mitigation measures and best practices for both Telegram platform developers and third-party Mini App cr...
We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.
