Fraudulent credentials for additional domains may also exist in the wild.
Tag: SSL
OS currently has no reliable way to detect bogus credentials released into the wild.
Stripped down package means there will be three independent versions of OpenSSL.
Ars surveys SSL use at major cloud providers and finds some holes.