key management

Heartbleed (CVE-2014-0160) — when memory leaked from the foundation of encrypted traffic

OpenSSL's memory over-read could leak private keys and sessions. The cause: the server trusted a claimed length and read adjacent memory. The lesson: act as if it all leaked — re-issue certificates, rotate all secrets — plus the weight of foundational software and memory safety.