Their initial assessment was CRITICAL at the point of announcement. Turned out to be only HIGH. Aren't we lucky or what? Would I have preferred to not deal wit

Their initial assessment was CRITICAL at the point of announcement. Turned out to be only HIGH. Aren't we lucky or what? Would I have preferred to not deal with it on this holiday? Yes. But I prefer to be safe than sorry, and the OpenSSL team is doing their best to help us be to safe. When was the last time you had to deal with such an issue, where a HIGH vuln was announced as a CRITICAL one?