Hello,
On 4/11/14, 12:11 PM, Valentin V. Bartenev wrote:
"Answering the Critical Question: Can You Get Private SSL Keys Using
Heartbleed?"
@
http://blog.cloudflare.com/answering-the-critical-question-can-you-get-private-ssl-keys-using-heartbleed
Thanks for the link. On a quick read it seems their conclusion is that
while it is *extremely* unlikely that your private key(s) was/were
stolen using nginx, you should still re-key and revoke. While
comforting, not really of any great practical help.
Nice that CloudFlare (and no doubt others) received significant advance
warning while the rest of us were left vulnerable. Just sayin...
--
Jim Ohlstein
"Never argue with a fool, onlookers may not be able to tell the
difference." - Mark Twain
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
