3 ms·
No. This means you need to change keys for every ssl service you run. Passwords were known to be leaked earlier.
by spindritf 13y ago
No. This means you need to change keys for every ssl service you run. Passwords were known to be leaked earlier.
- sitkack 13y agoNew PRIVATE KEY, then new certs with that key.
- just2n 13y agoReally it means (as everyone assumed in the first place) that anything a web server might have in its heap needs to be totally thrown away. Private keys. Passwords. Credit card numbers. Security questions/answers. Sessions. Anything you'd send to a web server or receive from a web server is presumed compromised.
- Asparagirl 13y agoSeen on Twitter a few days ago: "Heartbleed is the Red Wedding of the Internet". Thought it hyperbolic at the time, but not any more...