From: Molly de Blanc <molly@fsf.org>
Date: Thu, 7 Jun 2018 19:31:51 +0000 (-0400)
Subject: updated mac and windows to include comments about efail.
X-Git-Url: https://vcs.fsf.org/?a=commitdiff_plain;h=6972a1cad5e60bcaf5c8122a6dfb40bd840397b5;p=enc.git

updated mac and windows to include comments about efail.
---

diff --git a/en/mac.html b/en/mac.html
index 913fb4df..af177317 100644
--- a/en/mac.html
+++ b/en/mac.html
@@ -241,6 +241,8 @@ so, skip this step.</p>
 <p>If not, search "Enigmail" with the search bar in the upper right. You
 can take it from here. Restart your email program when you're done.</p>
 
+<p>Enigmail versions prior to 2.0.6 have serious security issues. Make sure to install version 2.0.6 or later. The current version is 2.0.6.1.</p>
+
 <!-- ~~~~~~~~~ Troubleshooting ~~~~~~~~~ -->
 <div class="troubleshooting">
 
@@ -646,6 +648,9 @@ using GnuPG, even if they can't figure out what you're saying. When you
 send attachments, Enigmail will give you the choice to encrypt them or not,
 independent of the actual email.</p>
 
+<p>For greater security against potential attacks, you can turn off
+HTML. Instead, you can render the message body as plain text.</p>
+
 </div><!-- End .main -->
 </div><!-- End #step-headers_unencrypted .step-->
 
diff --git a/en/windows.html b/en/windows.html
index 84865546..3704ff18 100644
--- a/en/windows.html
+++ b/en/windows.html
@@ -241,6 +241,8 @@ so, skip this step.</p>
 <p>If not, search "Enigmail" with the search bar in the upper right. You
 can take it from here. Restart your email program when you're done.</p>
 
+<p>Enigmail versions prior to 2.0.6 have serious security issues. Make sure to install version 2.0.6 or later. The current version is 2.0.6.1.</p>
+
 <!-- ~~~~~~~~~ Troubleshooting ~~~~~~~~~ -->
 <div class="troubleshooting">
 
@@ -646,6 +648,9 @@ using GnuPG, even if they can't figure out what you're saying. When you
 send attachments, Enigmail will give you the choice to encrypt them or not,
 independent of the actual email.</p>
 
+<p>For greater security against potential attacks, you can turn off
+HTML. Instead, you can render the message body as plain text.</p>
+
 </div><!-- End .main -->
 </div><!-- End #step-headers_unencrypted .step-->