@ivanristic Would traffic using PFS ciphers be vulnerable to restrospective decryption if the server is affected by CVE-2014-0160? Guess no?
@MacLemon It depends on what’s in the memory block. Leaked ticket key would compromise all sessions it signed.
2:16 PM - 7 Apr 2014
20 retweets
20 likes
-
-
-
-
@Isaac7solomon@ivanristic@MacLemon https://filippo.io/Heartbleed/ is a good start.0 retweets 2 likes -
-
-
-
0 retweets 1 like
-
-
@ivanristic@BrittanyClanton C/net recommends http://filippo.io/Heartbleed as a place to test whether the Heartbleed patch has been installed.3 retweets 3 likes -
-
@ivanristic I heard on the radio that there was a way to search/look up whether or not your info was breached. Is this true?0 retweets 2 likes - View other replies
-
@BrittanyClanton@ivanristic yes and no; IDS/IPS can be trained to detect but not prevent, and PFS stops access to prev collected data2 retweets 1 like
-
-
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.