- Site menu:
- Latest Discussions
- Latest Newswire
- Archives
- Submit Story
- Story HOWTO
- Syndicate
- E-mail Alerts
Schneier on Security- Heartbleed
|
|
|
Comments (3)
> Your old passwords are now in storage at every intelligence agency worldwide.
What makes you think they weren't already. :)
What makes you think they weren't already. :)
Some of the sites do check the certificate dates -- and report it. Of the three that Carla listed the other day
http://lxer.com/module/newswire/view/200791/
the LastPass one gives the certificate date (and iirc, the HostGator one reports the date if the certificate is "pre-heartbleed").
http://lxer.com/module/newswire/view/200791/
the LastPass one gives the certificate date (and iirc, the HostGator one reports the date if the certificate is "pre-heartbleed").
Post a comment
A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.
Your message:Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help
Sign up and post (it is free) or Log in and post
All these tests don't check the date on the cert! Schneier is right, we won't be out of the woods on this until each ssl certificate has been regenerated. I for one will be checking the cert date on my bank's https pages to make sure they have been updated before I will trust them. Also make sure to change the passwords you use on ssl logins. Your old passwords are now in storage at every intelligence agency worldwide.