TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Ask HN: Bank says it fixed openSSL/HB, can those claims be tested?

1 点作者 biturd大约 11 年前
I can find the exile date, but not the purchase or activation date. I believe they updates SSL as heartbeats are now off, but the SSK cert nobly has 114 days left on it.<p>If they did a re-issue and revoke, that would be minimum a year would it not?<p>I can get the serial number of the cert, but how would I get the old certs serial number to compare it to?<p>I worry a lot pf people patched openSSL and called it a day, but our data was already compromised, so this open SSL patch does no good other than for new users. I can change my password, but if they have all the other data they need, I am still in trouble until that revocation of the old cert happens, correct?<p>Thank you.

1 comment

biturd大约 11 年前
I just found a tester and it states this: <a href="http://dl.dropbox.com/u/340087/drops/04.27.14/Screen%20Shot%202014-04-27%20at%208.43.05%20PM-29-204426.jpg" rel="nofollow">http:&#x2F;&#x2F;dl.dropbox.com&#x2F;u&#x2F;340087&#x2F;drops&#x2F;04.27.14&#x2F;Screen%20Shot%...</a><p>&#x27;Regenerated 2 years ago&#x27;, does that mean they in fact did not revoke, regenerate, and re-issue?