Ask HN: Bank says it fixed openSSL/HB, can those claims be tested?

1 points by biturd ↗ HN
I can find the exile date, but not the purchase or activation date. I believe they updates SSL as heartbeats are now off, but the SSK cert nobly has 114 days left on it.<p>If they did a re-issue and revoke, that would be minimum a year would it not?<p>I can get the serial number of the cert, but how would I get the old certs serial number to compare it to?<p>I worry a lot pf people patched openSSL and called it a day, but our data was already compromised, so this open SSL patch does no good other than for new users. I can change my password, but if they have all the other data they need, I am still in trouble until that revocation of the old cert happens, correct?<p>Thank you.

1 comment

[ 2.1 ms ] story [ 20.0 ms ] thread