Tarsnap: No heartbleed here

There’s a few reasons for this. First, the Tarsnap client-server protocol does not use TLS

I was also lucky: The Tarsnap webserver happens to be running an older version of OpenSSL which never had the vulnerable code

http://www.daemonology.net/blog/2014-04-09-tarsnap-no-heartbleed-here.html

For those who are curious about the protocol that Tarsnap uses : it’s explained here