Advanced

Can You Get Private SSL Keys Using Heartbleed?

Posted by bob on · 1 comment
CloudFare; By Nick Sullivan 		Mail this story
Print this story

Below is what we thought as of 12:27pm UTC. To verify our belief we crowd sourced the investigation. It turns out we were wrong. While it takes effort, it is possible to extract private SSL keys. (updated)

Full Story

  Nav
» Read more about: Story Type: Security

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (1)

cr ·
The update on the linked page states that it is quite possible to get at private keys. CloudFlare set up a challenge box; several somebodies mastered the challenge. The summary here at LXer should be amended to point out this fact. It can be hacked, therefore it probably has been hacked. Change your keys.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post