On 13 Apr 2014, at 2:04 PM, Michael Ströder <mich...@stroeder.com> wrote:

> No, it does *not* answer the question.
> 
> The question was: Who is currently using it?

Just to clarify any possible confusion, whether or not a piece of software 
actively uses the heartbeat makes no difference to the bug, you are still 
vulnerable simply by virtue of the feature being there. Make sure that if you 
are using an effected version of openssl, you patch openssl.

Regards,
Graham
--

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to