Note that until it gets patched, you can go to your ELB config and disable TLS s... | Hacker News

Hacker News .hnnew | past | comments | ask | show | jobs | submit

nicpottier on April 8, 2014 | parent | context | favorite | on: OpenSSL Security Advisory: TLS heartbeat read over...

Note that until it gets patched, you can go to your ELB config and disable TLS support, which I believe (someone please correct me if not) will protect you from this particular attack. Whether the cure is better than the disease is up to you.

ccpost on April 8, 2014 [–]

Disabling TLS in the ELB config seemed to work for me until AWS finishes the patch rollout. (Looks like they're partway on the rollout.)

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact