<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	 xmlns:media="http://search.yahoo.com/mrss/" 
	>
<channel>
	<title>
	Comments on: What is Heartbleed Bug and How to Protect yourself and Stay Safe?	</title>
	<atom:link href="https://www.thewindowsclub.com/heart-bleed-bug/feed" rel="self" type="application/rss+xml" />
	<link>https://www.thewindowsclub.com/heart-bleed-bug</link>
	<description>TheWindowsClub covers authentic Windows 11, Windows 10 tips, tutorials, how-to&#039;s, features, freeware. Created by Anand Khanse, MVP.</description>
	<lastBuildDate>Sun, 11 Jul 2021 05:57:27 +0000</lastBuildDate>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.0</generator>
	<item>
		<title>
		By: Dan		</title>
		<link>https://www.thewindowsclub.com/heart-bleed-bug#comment-32885</link>

		<dc:creator><![CDATA[Dan]]></dc:creator>
		<pubDate>Mon, 14 Apr 2014 16:28:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.thewindowsclub.com/?p=85796#comment-32885</guid>

					<description><![CDATA[In reply to &lt;a href=&quot;https://www.thewindowsclub.com/heart-bleed-bug#comment-32881&quot;&gt;Anand Khanse&lt;/a&gt;.

Any time! There is another doodad in re Heartbleed, which I&#039;d heard Steve Gibson praise on &quot;Security Now!&quot; podcasts...it&#039;s called Calomel SSL Validation extension; but it&#039;s for Firefox only, and where it has a few small tweaks, for a well-read average user it really just lets one know if a site/page supports Perfect Forward Secrecy...however, a few sites which pass &quot;Chromebleed&quot;, &quot;Heartbleed -Ext&quot;, and &quot;Qualys&quot; got &quot;red shields&quot; from Calomel, possibly as Calomel ignores or is disrupted by negotiating some sites&#039;  overlaying web security.  It seemed to me &quot;Chromebleed&quot; and &quot;Heartbleed -Ext&quot; gave more reliable reads, and if many are getting as many green icons as I do, use of these plugins could also help calm any hysteria about insecure commercial logins.

I heard on April 7, 2014, Microsoft announced IE 12 will finally get strict content policy settings; my wishlist includes CSRF protection which would help re Heartbleed and non-IIS sites with lax security. Cheers!]]></description>
			<content:encoded><![CDATA[<p>In reply to <a href="https://www.thewindowsclub.com/heart-bleed-bug#comment-32881">Anand Khanse</a>.</p>
<p>Any time! There is another doodad in re Heartbleed, which I&#8217;d heard Steve Gibson praise on &#8220;Security Now!&#8221; podcasts&#8230;it&#8217;s called Calomel SSL Validation extension; but it&#8217;s for Firefox only, and where it has a few small tweaks, for a well-read average user it really just lets one know if a site/page supports Perfect Forward Secrecy&#8230;however, a few sites which pass &#8220;Chromebleed&#8221;, &#8220;Heartbleed -Ext&#8221;, and &#8220;Qualys&#8221; got &#8220;red shields&#8221; from Calomel, possibly as Calomel ignores or is disrupted by negotiating some sites&#8217;  overlaying web security.  It seemed to me &#8220;Chromebleed&#8221; and &#8220;Heartbleed -Ext&#8221; gave more reliable reads, and if many are getting as many green icons as I do, use of these plugins could also help calm any hysteria about insecure commercial logins.</p>
<p>I heard on April 7, 2014, Microsoft announced IE 12 will finally get strict content policy settings; my wishlist includes CSRF protection which would help re Heartbleed and non-IIS sites with lax security. Cheers!</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Anand Khanse		</title>
		<link>https://www.thewindowsclub.com/heart-bleed-bug#comment-32881</link>

		<dc:creator><![CDATA[Anand Khanse]]></dc:creator>
		<pubDate>Mon, 14 Apr 2014 14:57:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.thewindowsclub.com/?p=85796#comment-32881</guid>

					<description><![CDATA[In reply to &lt;a href=&quot;https://www.thewindowsclub.com/heart-bleed-bug#comment-32822&quot;&gt;Dan&lt;/a&gt;.

Thanks for the heads up Dan. Covered here: https://www.thewindowsclub.com/browser-extensions-protect-heartbleed]]></description>
			<content:encoded><![CDATA[<p>In reply to <a href="https://www.thewindowsclub.com/heart-bleed-bug#comment-32822">Dan</a>.</p>
<p>Thanks for the heads up Dan. Covered here: <a href="https://www.thewindowsclub.com/browser-extensions-protect-heartbleed" rel="ugc">https://www.thewindowsclub.com/browser-extensions-protect-heartbleed</a></p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Dan		</title>
		<link>https://www.thewindowsclub.com/heart-bleed-bug#comment-32822</link>

		<dc:creator><![CDATA[Dan]]></dc:creator>
		<pubDate>Sat, 12 Apr 2014 05:15:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.thewindowsclub.com/?p=85796#comment-32822</guid>

					<description><![CDATA[In reply to &lt;a href=&quot;https://www.thewindowsclub.com/heart-bleed-bug#comment-32781&quot;&gt;Anand Khanse&lt;/a&gt;.

Sorry for late comment, but just found two brand-new plugins which developers say can help people know if site they just landed on appears safe from Heartbleed or not: for Chrome browsers, new extension &quot;Chromebleed&quot;; for Firefox, new extension &quot;Heartbleed -Ext 3.0&quot;; both somewhere on browser screen will have icon/indicia which turns colors from green for safe, yellow for probably safe, and red for likely unsafe; both extensions say incorporating heartbleed assessment ideas of Filipo Valsorda (as third party). Hope this helps. In my earlier post I mentioned IIS; to be sure, this applies only to SITES on IIS; and would that more enterprises would follow The Windows Club&#039;s style of DDoS, SEO spam, and other protective safeguards! Cheers!]]></description>
			<content:encoded><![CDATA[<p>In reply to <a href="https://www.thewindowsclub.com/heart-bleed-bug#comment-32781">Anand Khanse</a>.</p>
<p>Sorry for late comment, but just found two brand-new plugins which developers say can help people know if site they just landed on appears safe from Heartbleed or not: for Chrome browsers, new extension &#8220;Chromebleed&#8221;; for Firefox, new extension &#8220;Heartbleed -Ext 3.0&#8221;; both somewhere on browser screen will have icon/indicia which turns colors from green for safe, yellow for probably safe, and red for likely unsafe; both extensions say incorporating heartbleed assessment ideas of Filipo Valsorda (as third party). Hope this helps. In my earlier post I mentioned IIS; to be sure, this applies only to SITES on IIS; and would that more enterprises would follow The Windows Club&#8217;s style of DDoS, SEO spam, and other protective safeguards! Cheers!</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Anand Khanse		</title>
		<link>https://www.thewindowsclub.com/heart-bleed-bug#comment-32781</link>

		<dc:creator><![CDATA[Anand Khanse]]></dc:creator>
		<pubDate>Fri, 11 Apr 2014 03:58:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.thewindowsclub.com/?p=85796#comment-32781</guid>

					<description><![CDATA[In reply to &lt;a href=&quot;https://www.thewindowsclub.com/heart-bleed-bug#comment-32778&quot;&gt;Dan&lt;/a&gt;.

Thanks for mentioning the SSL Server Test. Yes, you can check any site there and The Windows Club does pass with an A. :) https://www.ssllabs.com/ssltest/analyze.html?d=thewindowsclub.com]]></description>
			<content:encoded><![CDATA[<p>In reply to <a href="https://www.thewindowsclub.com/heart-bleed-bug#comment-32778">Dan</a>.</p>
<p>Thanks for mentioning the SSL Server Test. Yes, you can check any site there and The Windows Club does pass with an A. :) <a href="https://www.ssllabs.com/ssltest/analyze.html?d=thewindowsclub.com" rel="nofollow ugc">https://www.ssllabs.com/ssltest/analyze.html?d=thewindowsclub.com</a></p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Dan		</title>
		<link>https://www.thewindowsclub.com/heart-bleed-bug#comment-32778</link>

		<dc:creator><![CDATA[Dan]]></dc:creator>
		<pubDate>Fri, 11 Apr 2014 01:26:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.thewindowsclub.com/?p=85796#comment-32778</guid>

					<description><![CDATA[Excellent and accurate article; could only add EFF had an email out today in part saying TOR hidden services sites may have been compromised, which I offer as example of how easily any affected server site can suffer; and Qualys SSL Labs currently has free online SSl Server Test to check any website for Heartbleed vulnerability (of course, The Windows Club passed with their grade A!). Hope this is useful.]]></description>
			<content:encoded><![CDATA[<p>Excellent and accurate article; could only add EFF had an email out today in part saying TOR hidden services sites may have been compromised, which I offer as example of how easily any affected server site can suffer; and Qualys SSL Labs currently has free online SSl Server Test to check any website for Heartbleed vulnerability (of course, The Windows Club passed with their grade A!). Hope this is useful.</p>
]]></content:encoded>
		
			</item>
	</channel>
</rss>
