The VPN Consortium has issued a new certification for SSL VPN gateways that tests whether the gear supports JavaScript, a key element of many corporate Web portals.

Fedor Indutny, a core member of the node.js team, has proved that it is in fact possible for an attacker to sniff out the private SSL keys from a server left exposed by the Heartbleed bug. The ...