# 'Heartbleed' fix may slow Web performance (HT Tech)

> The heartache from the Heartbleed Internet flaw is not over, and some experts say the fix may lead to online disruption and confusion.

# 'Heartbleed' fix may slow Web performance

## The heartache from the Heartbleed Internet flaw is not over, and some experts say the fix may lead to online disruption and confusion.

Apr 16 2014, 17:23 IST

![Follow on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/follow-us-facebook.png)

![Follow on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/follow-us-facebook-hover.png)

![Share](https://images.hindustantimes.com/tech/static/revamp/images/png/Share.png)

![Share](https://images.hindustantimes.com/tech/static/revamp/images/png/Shareclicked.png)

![Share on WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/whatsapp.png)

![Share on WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/whatsapp-hover.png)

![Share on Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/twitter.png)

![Share on Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/twitter-hover.png)

![Share on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/facebook.png)

![Share on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/facebook-hover.png)

![Bookmark](https://images.hindustantimes.com/tech/static/revamp/images/png/Bookmark.png)

![Bookmarked](https://images.hindustantimes.com/tech/static/revamp/images/png/Bookmarked.png)

The heartache from the Heartbleed Internet flaw is not over, and some experts say the fix may lead to online disruption and confusion.

The good news is that most sites deemed vulnerable have patched their systems or are in the process of doing so.

The bad news is that Web browsers may be overloaded by the overhaul of security certificates, leading to error messages and impacting Web performance, said Johannes Ullrich of the SANS Internet Storm Center.

Also read

click here.

'A good percentage of the websites are patched,' Ullrich told AFP.

The patches enable the Web operators to obtain new security certificates that demonstrate they can be trusted by Web browsers.

But Ullrich noted that for each patch, Web browsers must update their list of 'untrusted' certificates or 'keys' that would be rejected.

'For the fix, the website needs to obtain a new private key and the old key has to be revoked,' he said. 'Browsers will not trust the old keys.'

Browsers may usually update dozens of keys on a daily basis, but because of Heartbleed, that may rise to tens of thousands.

If the verification process takes too long, Ullrich said, the browser may simply declare the site invalid or show an error message.

'People will see errors,' he said. 'They will see an invalid certificate. They can either accept the certificate or consider it invalid.'

The big danger is that Internet users may become so confused or frustrated that they ignore the warnings or reconfigure their browsers to no longer perform the security check.

'If people turn off those lists, then a hacker could get in,' Ullrich said.

With thousands of websites seeking new security credentials, 'some certificate authorities and website administrators have been making careless mistakes,' online security firm Netcraft noted.

Warnings about the danger have grown over the past week, with everyone from website operators and bank officials to Internet surfers and workers who telecommute being told their data could be in danger.

The bug is a flaw in the OpenSSL encryption at 'https' websites that Internet users have been taught to trust.

The Heartbleed flaw lets hackers snatch packets of data from working memory in computers, creating the potential for them to steal passwords, encryption keys or other valuable information. The security firm Cloudflare reported last week that it appeared impossible to use Heartbleed to steal certificates to impersonate a website, but then reversed itself after a 'challenge' to the security community brought out evidence these thefts were possible.

Google said that some versions of its Android mobile operating system may be vulnerable to Heartbleed. On Monday, it urged developers to create new security keys to ensure apps and other services can be trusted.

Trend Micro security specialist Veo Zhang said the latest evidence shows mobile phones are potentially vulnerable in two ways:

'This is because mobile apps may connect to servers affected by the bug,' Zhang said in a blog.

'However, it appears that mobile apps themselves could be vulnerable... We have found 273 in Google Play which are bundled with the standalone affected OpenSSL library, which means those apps can be compromised in any device.'

Some of the first evidence of hackers using Heartbleed have begun to surface in recent days. British parenting website Mumsnet announced Monday that users' data had been accessed, potentially compromising 1.5 million accounts.

Officials in Ottawa said personal data for as many as 900 Canadian taxpayers was stolen after being made vulnerable by the 'Heartbleed' bug.

The Canadian Revenue Agency last week shuttered its website over concerns about the Heartbleed bug.

Catch all the Latest Tech News, Mobile News, Laptop News, Gaming news, Wearables News , How To News, also keep up with us on Whatsapp channel,Twitter, Facebook, Google News, and Instagram. For our latest videos, subscribe to our YouTube channel.

16 Apr, 17:20 IST

71,589,383,181,246

NEXT ARTICLE BEGINS

![View all](https://images.hindustantimes.com/tech/static/revamp/images/png/view-all-icon.png)

## Tips & Tricks

![Ghibli-style art](https://images.hindustantimes.com/tech/img/2025/03/28/414x233/ChatGPT_Ghibli_style_images_1743161814450_1743161814596.jpg)

### How to turn your photos into Ghibli-style art with ChatGPT for free: Step-by-step guide

![How to create an invitation using iPhone’s new Apple Invites app- Step-by-step guide](https://images.hindustantimes.com/tech/img/2025/02/14/414x233/invites_1738728829564_1739543695649.png)

### How to create an invitation using iPhone’s new Apple Invites app- Step-by-step guide

![Apple TV app arrives on Android phones and tablets: What you get and how to install it](https://images.hindustantimes.com/tech/img/2025/02/13/414x233/unnamed_1739426557335_1739426567634.jpg)

### Apple TV app arrives on Android phones and tablets: What you get and how to install it

![Vodafone Idea OTT plans](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Vodafone Idea users can now stream 17 OTT apps with one subscription: Here's how

![Android data transfer methods](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### How to transfer data from one Android to another using Google backup, USB-C cable, and more

## Editor’s Pick

![iPhone 16e launched with A18 chip, Apple AI—bringing flagship power on a budget: Check specs, price](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iPhone 16e launched in India: All details about the new budget mobile from Apple

![DeepSeek was founded in China with only a fraction of the budget of the top AI companies in the US.](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### DeepSeek AI: How it works, who’s behind it, how it’s different from ChatGPT, and its big US market impact explained

![iPhone 17 Air likely to get this feature that iPhone 17 Pro models may miss out on](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iPhone 17 Air likely to get this feature that iPhone 17 Pro models may miss out on

![Google Whisk AI explained: How remixing works, availability, and how it differs from Gemini](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Google Whisk AI explained: How remixing works, availability, and how it differs from Gemini

![iOS 18.4 beta arriving soon: Know why it is the biggest iPhone update](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iOS 18.4 beta arriving soon: Know why it is the biggest iPhone update

## Trending Stories

![Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order

![Infinix Note 50s 5G+](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC

![Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more

![Apple Intelligence AI training](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Apple plans to train AI using your on-device data without accessing personal content or emails: Report

![CMF Buds 2](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside

keep up with tech

![Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-facebook.png)

![Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-twitter.png)

![WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-whatsApp.png)

![Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-facebook.png)

## Gaming

![Check out these five gaming monitors under  <span class='webrupee'>₹</span>20,000,](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Top 5 gaming monitors under ₹20000 you should consider

![gaming consoles](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Grab gaming consoles at discounted rates during Amazon Great Indian Festival: Up to 72% off

![Pokémon GO Wild Area 2025](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Pokémon GO Wild Area 2025 to bring Grimmsnarl family, Shiny Hatenna, and global challenges

![Shade Silver](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Shade Silver free on Steam for a limited time: Here’s how to get it

![Call of duty](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Call of Duty: Black Ops 7 skips Switch 2 at launch, release date and price leak

![View all](https://images.hindustantimes.com/tech/static/revamp/images/png/view-all-icon.png)

## Trending News

### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order

![Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order](https://images.livemint.com/static/static/1x1_img.gif)

### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC

![Infinix Note 50s 5G+](https://images.livemint.com/static/static/1x1_img.gif)

### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more

![Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more](https://images.livemint.com/static/static/1x1_img.gif)

### Apple plans to train AI using your on-device data without accessing personal content or emails: Report

![Apple Intelligence AI training](https://images.livemint.com/static/static/1x1_img.gif)

### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside

![CMF Buds 2](https://images.livemint.com/static/static/1x1_img.gif)

## Trending Gadgets

Mobiles

Laptops

Tablets

![HT Tech](https://images.hindustantimes.com/tech/static/revamp/images/png/HT_tech-new.gif)

- https://tech.hindustantimes.com/tech/news/heartbleed-fix-may-slow-web-performance-story-ULoVFA4gRGIWPCkJO551MN.html