CloudFlare’s analysis Friday that Heartbleed may not be able to recover private keys turns out to be wrong. Two candidates recovered the keys from their challenge server.
CloudFlare’s analysis Friday that Heartbleed may not be able to recover private keys turns out to be wrong. Two candidates recovered the keys from their challenge server.
Research by CloudFlare indicates that Heartbleed can be used to obtain contents of server memory, but not private keys.
But today, the content distribution network CloudFlare has announced Heartbleed may not allow access to those private keys after all. In two weeks of testing, the company has been unable to successfully access private keys with Heartbleed, suggesting the attack may not be possible at all. If it is possible, it is at a minimum very […]
Latest Comments