> Thanks everyone for the quick and complete feedback. New questions arose:
Again, you will have better luck asking on an OpenSSL mailing list. There is no guarantee that anyone on this mailing list is an expert in OpenSSL. > The communication between browser and X could be eavesdropped. Is that > correct? Someone else could connect to X and use Heartbleed to scan the contents of X's memory. Anything sent to X could be considered compromisable for so long as it's stored in X's RAM. _______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users