UPDATE: As of April 10, 2014, we’ve patched all core GoDaddy services that were running the affected version of OpenSSL. We’re continuing to reach out to our customers who might still be affected by the vulnerability and providing them with instructions on how to update their servers and SSL certificates.
Last week, we learned about a potential security exploit called “Heartbleed” on some websites that use an SSL to secure customer information. If you want more details about the vulnerability, there’s an article in The New York Times about it and a lot of information on the Heartbleed website.
This is what’s important to know: Heartbleed is critical. It affected nearly two-thirds of the Internet and many large Internet companies have been working long hours to update their services to keep customers and visitors safe.
Since we’ve learned about the vulnerability, we’ve been updating GoDaddy services that use the affected OpenSSL version. This includes the servers we use as well as the shared hosting accounts our customers use to run their businesses.
We’re also in the process of contacting our customers who use dedicated servers and providing them with the instructions they need to patch their servers and update their SSLs, if necessary.
For additional security, we recommend that you rekey your SSL certificate. If you have an SSL certificate with us, you can rekey your SSL free of charge. Virtual and Dedicated Server customers and customers who host their websites elsewhere can follow the directions here. If you have shared hosting and an SSL with us, send an email with the common name of your SSL to heartbleed@godaddy.com and we’ll take care of it.
If you have any questions or concerns, don’t hesitate to contact us. This is a big deal. We’ve got your back. We’ll keep you safe.
