This issue was discovered too late to cover it in the book, but we have an article with complete details here: What You Need to Know About the EFAIL Vulnerability .