Re:Willem Pinckaers on Akamai's flawed OpenSSL allocator patch
by daeken on Sunday April 13, 2014 @09:28PM
(#7584038)
> As a result, we have begin the process of rotating all customer SSL keys/certificates.
AGHHHHHHH! Even if their code was likely to have worked perfectly, this is a huge mistake. And I mean huge. They should've operated under the assumption that their defense didn't work and immediately rotated all keys. Period.
AGHHHHHHH! Even if their code was likely to have worked perfectly, this is a huge mistake. And I mean huge. They should've operated under the assumption that their defense didn't work and immediately rotated all keys. Period.