What Is the ‘EFAIL’ Vulnerability and What Can You Do About It?

May 18, 2018/in Articles /by Fornetix

What is efail?

Efail is the name given by German Researchers to a potential attack against PGP or S/MIME encoded emails to take the encrypted contents and send them to a third-party actor.

How does efail work?

Efail requires an HTML encoded email to be manipulated by prepending an html image tag to the beginning of the email. This in turn forces the email client to send a request to a malicious domain looking for an image file that is the body of the encrypted email. Read more

Differentiating Key Management Systems & Hardware Security Modules (HSMs)

May 15, 2018/in Articles /by Fornetix

Key encryption managers have very clear differences from Hardware Security Modules (HSMs.) The main differences reside in how the HSM encryption keys can be used by a Key Manager or HSM. There are other more important differentiators, however, let’s start with how encryption key managers leverage open standards, like the Key Management Interoperability Protocol (KMIP), and what exactly an HSM is.

Supporting BYOK Within AWS With Fornetix VaultCore

May 9, 2018/in Articles /by Fornetix

Amazon Web Services (AWS) is a secure cloud services provider that delivers compute, network, and data storage services. There are numerous benefits to migrating data storage and management to the cloud, but there are security considerations that must be addressed prior to doing so.