
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
xorkeesign Webmail
xorkeesign-webmail
Digitally sign and verify emails in popular web mail services.
xorkeesign is a digital signature enabling service from Odyssey Technologies Ltd.
xorkeesign runs on the versatile xorkee infrastructure that is a superset of PKI.
This add-on is a specialized interface to many of the popular web mail clients for authenticating the mails the users send and also to verify the authenticity of the mails received from others.
The add-on allows the user to bind his personal key with his mail id through xorkeesign. The add-on stays dormant when the browser is used to access any site other than a supported mail interface.
When the add-on recognizes a supported interface it offers the user to digitally sign the mail before or when he clicks the 'Send' button. When the user chooses to sign his signatures are added as additional attachments to the mail in the standard PKI - CMS format (RFC #5652).
When such a signed mail is received the add-on helps the user to verify the senders' signatures. It displays the result of such verification within the mail client page itself.
It offers the user the certainty that the mail is genuinely from the claimed sender. This goes a long way in preventing users from clicking unsafe links and attachments and significantly reduce the efficacy of phishing and ransomware.
When a signed mail is received in a browser without this add-on, the users can continue to read the mail as if it is not signed. His usual mailing experience is not impacted in any way.
The add-on also allows the recipient of a email to archive the mail body or one or more of the attachments as data attached signatures in CMS format. This will help in creating permanent authenticated business communication records.
The known supported mail clients are:
The add-on may work on other mail clients if they follow the page formats of these clients.
Odyssey Technologies, the publisher of this add-on also publish add-ons for native mail clients like Mozilla Thunderbird, Gmail, Microsoft 365 and the mail authentication and verification works seamlessly across all these mail clients including this.
The add-on does not collect or store any other data than described above.
FAQs
Digitally sign and verify emails in popular web mail services.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.