Browse › Community ›Announcements
Hi All,
I just wanted to briefly let you know that our server is not one that is vulnerable to the OpenSSL heartbleed bug that you may have heard about on the news recently.
Our server currently does not have the OpenSSL module installed, but may at some point in the future if we decide to go full SSL for the site out of principle.
Thanks!
I've heard passing mention of this heartbleed thing, but I haven't bothered to research it at all. I take it exploits a hole in OpenSSL's security? I don't think I know any websites that use OpenSSL.
it's a pretty big deal for those sites that have the issue. - there's a wikipedia article that explains it pretty well -
http://en.wikipedia.org/wiki/Heartbleed