> Why wasn't HTTPS Everywhere affected by Heartbleed? Because we sign updates with an offline signing key that EFF keeps on a dedicated airgapped machine. So ev

> Why wasn't HTTPS Everywhere affected by Heartbleed? Because we sign updates with an offline signing key that EFF keeps on a dedicated airgapped machine. So even if SSL is totally broken, the integrity of updates is guaranteed. Yay! WHY IN THE WORLD AREN'T YOU USING AN HSM!?!?! If you're at the point where you feel the need for a dedicated airgapped machine to hold the signing key, then you are at the point where you need an HSM.