Quote from: awesomeami on April 09, 2014, 09:38:56 AM

Quote from: binaryFate on April 09, 2014, 08:33:03 AM

Good news that chrome and firefox are not affected.

Can you pls explain how can I be/was safe using FF connecting to "compromised OpenSLL www".
ty - I am not much expert in that - maybe some link, ty

The vulnerability is in the openssl library, that may be used by your browser among other things. But apparently firefox is using a different module for SSL capabilities, and not the openssl implementation, so it is not affected.
If a server was using that particular weak version of the openssl library, then anybody could dump data from that server, but not the other way around.

This is on the level of "browser not technically affected", however on the level of "user being safe" as you mention, things are less good: if a server was vulnerable, then the attacker could maybe use the weakness to take further control of the server (or impersonate it using its certificate), putting you at risk when you are doing your usual activity with what you believe is the usual friendly https server you have always talk to...