Cryptographer Recalls Warnings About OpenSSL Ignored Before Heartbleed

Cryptographer Matthew Green recalled how, a year or two before Heartbleed struck in 2014, his warnings that the widely used OpenSSL library was critically undermaintained were ignored and ridiculed. The OpenSSL team had even suggested "critical infrastructure" meant dams and power plants, not their library—until the bug erupted a month later.

2026-10-27 ~ 2026-10-27 · 3 related posts

• Cryptographer recalls warning everyone about underfunded OpenSSL before Heartbleed — matthew_d_green · 2026-10-27

2 near-duplicate retellings: matthew_d_green · matthew_d_green