A specially created server ( http://blog.meldium.com/home/2014/4/10/testing-for-reverse-heartbleed , in Russian: http://www.xakep.ru/post/62350/default.asp ) can send similar request to client. But such attack has low probability.
2014-04-16 15:40 GMT+03:00 <matthew.pers...@lazard.com>: > Does it matter if you are only using client-side SSL, if you are not running > a server with Strawberry but just connecting to sites? -- Alexandr Ciornii, http://chorny.net
