Does anybody else find this eerily reminiscent of heartbleed?
Obscure broken feature that nobody uses (or needs) is enabled by default and allow private keys to leak.
Obscure broken feature that nobody uses (or needs) is enabled by default and allow private keys to leak.
Does anybody know if LibraSSL has released an SSH client yet? I can't code well enough to make security code safe, so I won't be able to help them out on it, but it sounds more and more like OpenSSH can't either.