News for hackers. Stuff that matters.

A comment on Forthcoming OpenSSL releases. Parent comment

Re:Forthcoming OpenSSL releases by baudehlo on Monday July 06, 2015 @10:15PM (#9843286)
Though I guess what they could do in such a scenario is implement a service which uses the signing server and hope to run undetected. Yes?
[ Parent | on HN ]
Re:Forthcoming OpenSSL releases by wolf550e on Tuesday July 07, 2015 @05:07AM (#9844306)
Yes. My first idea to detect this is keep count of signatures performed on the private key holding server and count of tls handshakes on your webserver.
[ Parent | on HN ]