Worth noting that the cost imposed on the Internet's infrastructure of mass revocation is non-trivial: http://blog.cloudflare.com/the-hard-costs-of-heartbleed

Worth noting that the cost imposed on the Internet's infrastructure of mass revocation is non-trivial: http://blog.cloudflare.com/the-hard-costs-of-heartbleed http://blog.cloudflare.com/the-hard-costs-of-heartbleed Just CloudFlare revoking all the certs on our network added 40Gbps of net new traffic to one CA. Mass revocation without making sure all systems were ready to handle it would have also been irresponsible. Props to Globalsign (our primary CA partner) for working with us to make sure we could pull it off.