- amo wasnt affected by heartbleed If you only address issues that have already happened, you will never provide adequate protection. The point is to ensure sa

- amo wasnt affected by heartbleed If you only address issues that have already happened, you will never provide adequate protection. The point is to ensure sane behavior when AMO is affected by some exploit. - signatures arent foolproof either Yeah, and actually, why bother with HTTPS at all: it's not foolproof, is it? - HTTPS everywhere.. is supposed to advocate for TLS being safe ? No, it advocates for TLS being safe if used with HTTPS everywhere. So before you have HTTPS everywhere enabled, you need an additional measure.