In other news, it is less likely that an SSL key was generated using IIS if the platform it is running on is AIX. I mean, it's a useful tip when targeting a re

In other news, it is less likely that an SSL key was generated using IIS if the platform it is running on is AIX. I mean, it's a useful tip when targeting a relatively dark target, but at the same time it isn't an absolute indicator of anything other than what generated the key (which nobody was really surprised at before, since everything from the prng to implementation differences could result in unique signatures for keys). This will be useful when someone finds an implementation-specific hole in a key gen and someone wants to sweep the internet for servers with bad keys.