Press Coverage of our Work

Below are some of the press articles that have covered our SSL research work:

• Levin, Dumitras Investigating Fixes for Heartbleed Bug, UMIACS News, Nov 07, 2014
• Sysadmins disposed of Heartbleed certs, but forgot to flush, The Register, Nov 10, 2014
• Levin Co-Authors Study that Finds Vulnerabilities in Use of Certificates for Web Security, UMIACS News, Oct 28, 2015

Press Coverage of Heartbleed and other SSL Mismanagement

Below are some of the press articles that cover Heartbleed as well as other instances where the PKI was mis-managed:

• A general overview of the Heartbleed bug
• Lenovo's "Superfish" root certificate
• Dell's installation of a root certificate
• Symantec issuing a Google certificate for testing
• Apple letting code signing certificates expire
• A recent GNUTLS bug
• The FREAK attack, allowing an attacker to force weak encryption
• The sorry state of certificate revocation

Press Coverage of DNSSEC and its Mismanagement

Below are some of the press articles that cover DNSSEC and its mismanagement:

• A longitudinal, end-to-end view of the DNSSEC ecosystem
• Why DNSSEC deployment remains so low