Azure safe from #Heartbleed

For those of you running secure web sites on the Azure platform you may wonder are you safe? Generally the answer is yes because “Microsoft Azure Web Sites, Microsoft Azure Pack Web Sites and Microsoft Azure Web Roles do not use OpenSSL to terminate SSL connections”.

However “OpenSSL is a common library on Linux for providing encryption functionality.  Customers running Linux images in Azure Virtual Machines, or software which uses OpenSSL, may be vulnerable”.

For more information see: http://blogs.msdn.com/b/windowsazure/archive/2014/04/09/information-on-microsoft-azure-and-heartbleed.aspx

Also the LastPass site has a useful blog: http://blog.lastpass.com/2014/04/lastpass-and-heartbleed-bug.html and also a SSL checker https://lastpass.com/heartbleed/

Advertisement