[Ach] OpenSSL 'heartbleed' bug

[ianG]

On 8/04/2014 10:40 am, Axel Hübl wrote:
> Happy updating and cert renewing.
> 
> ... and everybody is pushing forward to tls 1.1/1.2 which just became
> available in OpenSSL 1.0.1
> 
> Do we all get new free certs from our (probably also affected) CA's now?


They might do that for marketing reasons, but they are not obligated to
cover this issue.

(pop quiz:  what issue are they obligated to cover?)

iang

>> http://heartbleed.com/