Re: [Sks-devel] old certificates

[benfell]

James Cloos writes:

> > > > > > "KG" == Kiss Gabor (Bitman) <address@hidden> writes:
>
> KG> I ask everybody to declare if they did not use compromised version
> KG> of openssl since the start of validity period of certificate.
>
> The cert currently used by keys.jhcloos.com, issued 2014/April/11, was
> generated by gnutls and, where used with openssl, only used with 1.0.1g.

sks.disunitedstates.com is using a Class 2 StartSSL certificate, generated  
since heartbleed, used only with versions of openssl that have been patched  
for heartbleed.

--
David Benfell
See https://parts-unknown.org/node/2 if you do not understand the  
attachment.

pgp33xKP0Ib4C.pgp
Description: PGP signature