Comment by sliverstorm
12 years ago
Ok, so is TLS Heartbeat accessible in every service that uses TLS?
The big one that comes to mind aside from https is smtp/tls, e.g. port 587
Edit: Apparently a PoC on STARTTLS has already been written, so smtp/tls is definitely vulnerable
No comments yet
Contribute on Hacker News ↗