2 ms·
Ask HN: does Heartbleed effectively compromise most SSL certificates (MITM)?
From http://arstechnica.com/security/2014/04/critical-crypto-bug-exposes-yahoo-mail-passwords-russian-roulette-style/ :
myforwik writes:
"""
Remember the servers involved have potentially been leaking their private key for their certificate! This means anyone can 'fake' being them.
It is not enough to do new certificates. All of the old certificates could now be used for man in the middle attacks! 2/3rds of the Internets certificates potentially need to be blacklisted! This is a MAJOR disaster.
"""
- wodow 13y agoRelated: https://bugzilla.mozilla.org/show_bug.cgi?id=994033 https://bugzilla.mozilla.org/show_bug.cgi?id=994033