IIS doesn't use OpenSSL though; it uses CredSSP http://technet.microsoft.com/en-us/library/cc755284(WS.10).a....

Windows doesn't use OpenSSL, and Schneier's host is using Apache. I assume that he must not have direct control of his host or for some other reason cannot immediately upgrade/restart.