Ask HN: Does Heartbleed affect CAs?

1 pointsby chacham15vor 12 Jahren2 comments

If my understanding is correct the Heartbleed vulnerability affects any server running OpenSSL. Does this mean that root CAs need to update their root CA Certs? Should I be doing that manually somehow?

1 comments

mballantynevor 12 Jahren

Heartbleed affects servers terminating TLS connections using certain versions of OpenSSL. It doesn't impact certificate operations a CA would be doing, and CA root certificates are kept far, far away from front end web servers that might run TLS. Usually in something like this: http://en.wikipedia.org/wiki/Hardware_security_module

chacham15vor 12 Jahren

Thanks