3 ms·
I'm surprised that I haven't been contacted by any sites yet with advice to reset my password. Is it the case that not many sites were actually running 1.0.1?
by k2enemy 13y ago
I'm surprised that I haven't been contacted by any sites yet with advice to reset my password. Is it the case that not many sites were actually running 1.0.1? Or are they just patching, creating new certs, and calling it a day?
- Ergomane 13y agoIt appears so. Many sites that were vulnerable earlier today haven't even inactivated sessions.
- zhemao 13y agoI may be wrong, but I think that your credentials with a site are only vulnerable if they had the heartbeats extension turned on.
- GvS 13y agoI got contacted by Heroku 1h ago to reissue certificate and update my SSL endpoint.
- yogo 13y agoAs for re-issuing certs Namecheap is sucking in that department last night and today (it could be upstream with RapidSSL and PositiveSSL). GoDaddy seems to be speedy even though it looks like the notification emails are not being sent. Fun times :).