5 ms·

Indeed. They could clarify rather easily. Not using OpenSSL doesn't imply that they are secure, nor does it explain what they are using for the non-technical at

• ntakasaki 13y ago
  >Not using OpenSSL doesn't imply that they are secure Uhh, it does mean that they are secure from the HeartBleed bug. I think you're confused, OpenSSL is a piece of software, SSL is a protocol with multiple implementations. So it's possible to use SSL without using OpenSSL, hence the title of this post is completely wrong.
  • mercurialshark 13y ago
    I understand your point regarding HeartBleed, the title and SSL. However, does that make it acceptable to not use some form of SSL on the non-authentication portion of the site? And are you saying they do?
    • wglb 13y ago
      That is a different question. The title as you edited it is Illinois Gov't: Don't Worry, We Never Used SSL To Begin With which is very different (and wrong), from Illinois Gov't: Don't Worry, We Never Used OpenSSL To Begin With.
• wglb 13y ago
  Ok, so the non-technical attorneys on the site are going to know what SChannel is? I think not. I think their statement is fine.