News for hackers. Stuff that matters.

A comment on OpenSSL Security Advisory: TLS heartbeat read overrun. Parent comment

Re:OpenSSL Security Advisory: TLS heartbeat read overrun by cperciva on Monday April 07, 2014 @05:58PM (#7549853)
Segmenting my network isn't an option when "my network" involves machines on multiple continents.

I avoided ssh because sshd is an effectively unauditable mess, and breaks the "transient network glitches don't kill quiescent connections" assumption.

[ Parent | on HN ]
Re:OpenSSL Security Advisory: TLS heartbeat read overrun by otterley on Monday April 07, 2014 @08:46PM (#7550706)
How do transient network glitches kill the connection? I'm not completely familiar with the ssh wire protocol, but to my knowledge TCP is largely responsible for ensuring the reliability of the virtual circuit even in the event of a transient lower-layer failure.
[ Parent | on HN ]
Re:OpenSSL Security Advisory: TLS heartbeat read overrun by wiml on Tuesday April 08, 2014 @01:02AM (#7551508)
ssh frequently uses either application-level or TCP-level keepalives. But it doesn't have to; you can just turn off ssh keepalives and your quiescent connections will survive network outages.
[ Parent | on HN ]