Remster 30 #1 April 10, 2014 Better get that stuff patched, guys!Remster Quote Share this post Link to post Share on other sites
theonlyski 8 #2 April 10, 2014 I don't know of any SSL services running on the site. Not sure why your software indicated it is vulnerable though."I may be a dirty pirate hooker...but I'm not about to go stand on the corner." iluvtofly DPH -7, TDS 578, Muff 5153, SCR 14890 I'm an asshole, and I approve this message Quote Share this post Link to post Share on other sites
Meso 38 #3 April 11, 2014 I'm with theonlyski, I'm not sure why it's picking up dropzone.com as vulnerable. I can't think of any areas where we use SSL. I double checked on our premier subscriptions page, but we don't actually deal with any of the transactions and our subscription pages lead out to external payment sources like PayPal who run their own SSL. Haven't been able to find an instance of where we have SSL. Quote Share this post Link to post Share on other sites
Remster 30 #4 April 11, 2014 You know, I realize that it doesn't use SSL after I posted it, but, too late, and better safe than sorry! Thanks for looking into it.Remster Quote Share this post Link to post Share on other sites
PhreeZone 20 #5 April 11, 2014 If the libraries are installed on the hosting server it will show as vulnerable. In this case it might be bundled with the apache instance the pages are hosted on even if SSL is not in active use.Yesterday is history And tomorrow is a mystery Parachutemanuals.com Quote Share this post Link to post Share on other sites
wan2doit 6 #6 April 15, 2014 Here is a link to see where passwords need to be changed http://www.cnet.com/how-to/which-sites-have-patched-the-heartbleed-bug/ Quote Share this post Link to post Share on other sites
