heart bleed

Question

Has Outlook and HOtmail fixed the heart bleed bug so that we now can change our passwords?

Answer 1

Thank heavens someone else had the same reaction as I. When I ask whether Hotmail and Outlook are safe, I expect a yes or no answer, not a bunch of gobbledegook. And when Microsoft didn't answer plainly the first time, I repeated the question -- only to get more gobbledegook! Sheesh!

Answer 2

Still doesn't answer the question to people who dont know jargon.   Layperson users like me dont know what you are referring to by sayimg "Microsoft Account".   Are hotmail and outlook part of Microsoft account?

Answer 3

Hi dedlnr and ChrisChin_qc,

Thank you for posting here in Microsoft Community. We understand that you have some concern with the heartbleed bug.

Microsoft account, along with most Microsoft services, were not impacted by the OpenSSL vulnerability. A few services continue to be reviewed and updated with further protections.

Feel free to post back if you have other questions.

Thank you.

Johan

Answer 4

So Hotmail and Outlook are not affected?

Answer 5

FYI

9 Apr 2014 10:17 PM             

The Heartbleed vulnerability in OpenSSL (CVE-2014-0160) has received a significant amount of attention recently.  While the discovered issue is specific to OpenSSL, many customers are wondering whether this affects Microsoft’s offerings, specifically Microsoft Azure. Microsoft Account and Microsoft Azure, along with most Microsoft Services, were not impacted by the OpenSSL vulnerability. Windows’ implementation of SSL/TLS was also not impacted.

Microsoft Azure Web Sites, Microsoft Azure Pack Web Sites and Microsoft Azure Web Roles do not use OpenSSL to terminate SSL connections.  Windows comes with its own encryption component called Secure Channel (a.k.a. SChannel), which is not susceptible to the Heartbleed vulnerability.

Information on Microsoft Azure and Heartbleed