3 ms·
Even though this hole is huge, the ratio of attack-surface-exposed to security-gained from SSL is still in general worth it; you'd be throwing the baby out with
by Shish2k 13y ago
Even though this hole is huge, the ratio of attack-surface-exposed to security-gained from SSL is still in general worth it; you'd be throwing the baby out with the bathwater to disable encryption entirely IMO
For comparison, would you avoid having a web server (or roll your own) because of CodeRed?
- mikeash 13y agoI would say that something like Code Red is an argument against putting up a web server when you don't need it and it provides no direct advantages to you, just out of some idea that increasing the overall amount of web traffic is good.