3 ms·
>Not using OpenSSL doesn't imply that they are secure Uhh, it does mean that they are secure from the HeartBleed bug. I think you're confused, OpenSSL is a pie
by ntakasaki 13y ago
>Not using OpenSSL doesn't imply that they are secure
Uhh, it does mean that they are secure from the HeartBleed bug. I think you're confused, OpenSSL is a piece of software, SSL is a protocol with multiple implementations. So it's possible to use SSL without using OpenSSL, hence the title of this post is completely wrong.
- mercurialshark 13y agoI understand your point regarding HeartBleed, the title and SSL. However, does that make it acceptable to not use some form of SSL on the non-authentication portion of the site? And are you saying they do?
- wglb 13y agoThat is a different question. The title as you edited it is Illinois Gov't: Don't Worry, We Never Used SSL To Begin With which is very different (and wrong), from Illinois Gov't: Don't Worry, We Never Used OpenSSL To Begin With.