3 SSL vulnerability discovered in 3 months, anything wrong?
-Apple's Goto Fail
-GnuTLS certificate issue
- OpenSSL Heartbleed
It may be a coincidence but they all have something in common:
- affects SSL. - 'simple' coding error. - had been there for a long time. - flaw affects the fundamental feature of SSL. Affects certificates specifically while not needing anything at all in the third.
It may just be paranoia but there are very disturbing flaws.
OR
Maybe people have a very bad coding and 'auditing' habit.
At an age where there are so many privacy and surveillance issues, it gets worrisome.