On Tue, May 13, 2014 at 4:21 PM, David Nolan
<[email protected]>wrote:

> While SSH is not affected directly by the heartbleed bug, if you have a
> server that was affected by the heartbleed bug there is some risk that the
> SSH private key may have been exposed.


This requires that you somehow got the ssh private key into the memory of
an SSL-using process. I would argue that if that was possible, you already
had a pretty significant security hole.

-- 
brandon s allbery kf8nh                               sine nomine associates
[email protected]                                  [email protected]
unix, openafs, kerberos, infrastructure, xmonad        http://sinenomine.net
_______________________________________________
Tech mailing list
[email protected]
https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to