Re: DSA 2896-2 openssl - Apache 2 not detected as service to restart by postinst?
Yes the private keys can be compromised, but the perfect secrecy
should ensure that unless someone was doing an active MITM and had the
private key, the communications were safe.
On Wed, Apr 9, 2014 at 3:06 PM, Artikel-140 <info@artikel-140.nl> wrote:
> Hi,
>
> If Perfect Forward Secrecy is enabled, it there still a change that the
> private keys are compromised? This is the hole point about PFS, right?
>
> Grtz,
>
>
> On 04/09/2014 02:15 PM, bsod wrote:
>> Am 2014-04-09 13:38, schrieb Vladislav Kurz:
>>> So, why does openssh-server depend on libssl ?
>> oh... my bad, searched for dependencies openssl instead of libssl.
>>
>> However, it still does not use TLS and is therefore not concerned by
>> bugs in the heartbeat extension to it.
>>
>> Kind regards,
>>
>> Chris
>>
>>
>
>
> --
>
>
> --
> To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> Archive: [🔎] 20140409131404.DD3311DC@bendel.debian.org">https://lists.debian.org/[🔎] 20140409131404.DD3311DC@bendel.debian.org
>
--
Jérémie MARGUERIE
Reply to: