> If you're the NSA, you can probably get a CA to sign a cert for you, no need to steal theirs. That would leave a trace (at least the person issuing the cert

> If you're the NSA, you can probably get a CA to sign a cert for you, no need to steal theirs. That would leave a trace (at least the person issuing the cert would know) while heartbleed doesn't.