On 10 Apr 2014, at 18:16, Scott Howard <scott(a)doc.net.au> wrote:
Although clients are at risk, the vast majority of
browsers do NOT use OpenSSL
Note that a "reverse heartbleed" attack has been described, which has the
potential to harvest data from clients who have connected to rogue servers (such as might
be triggered by an embedded image in some spam, or by a similarly-crafted banner ad).
In other news, Randall Munroe has managed once again to describe a potentially-complicated
problem in a six-panel cartoon that a child would have no problem understanding: