Hey! I'm David, cofounder of zkSecurity and the author of the Real-World Cryptography book. I was previously a crypto architect at O(1) Labs (working on the Mina cryptocurrency), before that I was the security lead for Diem (formerly Libra) at Novi (Facebook), and a security consultant for the Cryptography Services of NCC Group. This is my blog about cryptography and security and other related topics that I find interesting.

Tarsnap: No heartbleed here posted April 2014

There's a few reasons for this. First, the Tarsnap client-server protocol does not use TLS

I was also lucky: The Tarsnap webserver happens to be running an older version of OpenSSL which never had the vulnerable code

http://www.daemonology.net/blog/2014-04-09-tarsnap-no-heartbleed-here.html

For those who are curious about the protocol that Tarsnap uses : it's explained here

Well done! You've reached the end of my post. Now you can leave a comment or read something else.

Here are some random popular articles:

Here are some random recent articles:

Comments

leave a comment...

My book Real-World Cryptography is finished and shipping! You can purchase it here.

If you don't know where to start, you might want to check these popular articles:

Here are the latest links posted:

You can also suggest a link.