From 50ad3939242885b1a1a11688abd0c9756631747f Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Fri, 11 Apr 2014 10:22:14 -0400 Subject: Code to blacklist authority signing keys (I need a list of actual signing keys to blacklist.) --- changes/bug11464_023 | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 changes/bug11464_023 (limited to 'changes') diff --git a/changes/bug11464_023 b/changes/bug11464_023 new file mode 100644 index 000000000..a9cd658ab --- /dev/null +++ b/changes/bug11464_023 @@ -0,0 +1,5 @@ + o Major features (security): + - Block every authority signing key that was used on an authority + vulnerable to the "heartbleed" bug in openssl (CVE-2014-0160). + (We don't have any evidence that these keys _were_ compromised; + we're doing this to be prudent.) Resolves ticket 11464. -- cgit v1.2.3 From 09ed8a5dbb5216caae0055c1608abbc8c76412c9 Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Mon, 14 Apr 2014 17:58:49 -0400 Subject: Tweak changes file and comment dates. --- changes/bug11464_023 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'changes') diff --git a/changes/bug11464_023 b/changes/bug11464_023 index a9cd658ab..80c04b21e 100644 --- a/changes/bug11464_023 +++ b/changes/bug11464_023 @@ -1,5 +1,5 @@ o Major features (security): - - Block every authority signing key that was used on an authority + - Block authority signing keys that were used on an authorities vulnerable to the "heartbleed" bug in openssl (CVE-2014-0160). (We don't have any evidence that these keys _were_ compromised; we're doing this to be prudent.) Resolves ticket 11464. -- cgit v1.2.3