3 ms·
Wow, does this imply that the Heartbleed bug might end up being even more damaging that previously thought? This paper shows that even if you've already revoked
by idbehold 12y ago
Wow, does this imply that the Heartbleed bug might end up being even more damaging that previously thought? This paper shows that even if you've already revoked your old certs, many pieces of widely used software don't even bother validating them.
- ossreality 12y agoYes. Like Chrome. And Android devices. And more. Yes, this is why Heartbleed is/was bad.
- Eridrus 12y agoThis has nothing to do with heartbleed. This means you can just generate certs on your own machine that a lot of software will simply accept.
- deleted 12y ago[deleted]