News for hackers. Stuff that matters.

A comment on Heartbleed certificate revocation tsunami yet to arrive.

Re:Heartbleed certificate revocation tsunami yet to arrive by nnx on Saturday April 12, 2014 @04:53AM (#7577357)
The first graph shows an interesting bump in SSL cert reissue activity on April 2nd - 5 days before public disclosure.

Could this be the day Google, CloudFlare, and other major internet companies in-the-know before the public disclosure, patched their servers?

Is this graph generally available, for any time range, from NetCraft or another monitoring service?

I'm aware the graph shown has a time range too narrow to conclude anything but this made me think that monitoring this graph or noticing unusual reissues from major internet services (Google/CloudFlare/AWS/Facebook) could be used as an advance warning mechanism that a significant SSL flaw is about to be publicly disclosed.

[ Parent | on HN ]
Re:Heartbleed certificate revocation tsunami yet to arrive by Maxious on Saturday April 12, 2014 @05:19AM (#7577387)
"We fixed the flaw on Monday March 31, 2014 for all CloudFlare customers, with public notification on Monday April 7, 2014, after the researchers' public announcement." https://support.cloudflare.com/hc/en-us/articles/201660084-U...
[ Parent | on HN ]