{"id":140,"date":"2014-04-13T09:23:00","date_gmt":"2014-04-13T13:23:00","guid":{"rendered":"https:\/\/www.thexyz.com\/blog\/2014\/04\/13\/questions-and-answers-on-heartbleed\/"},"modified":"2014-04-13T09:23:00","modified_gmt":"2014-04-13T13:23:00","slug":"questions-and-answers-on-heartbleed","status":"publish","type":"post","link":"https:\/\/www.thexyz.com\/blog\/questions-and-answers-on-heartbleed\/","title":{"rendered":"Questions and Answers On Heartbleed"},"content":{"rendered":"
\n
\n
\n
\n
\n
\n

\nWhat is Heartbleed?<\/h3>\n

Here is a link that should help explain
\n what the Heartbleed bug is:
\n http:\/\/heartbleed.com\/<\/a><\/p>\n

\nAre my users affected?<\/h3>\n

Any service or website that is
\n connected to the internet and uses SSL encryption is
\n potentially vulnerable to the Heartbleed bug.<\/p>\n

\nDid you fix the issue?<\/h3>\n

Yes, upon receiving the news that
\n Heartbleed existed and a patch was made available, we
\n immediately patched our services to remediate any
\n potential vulnerability. We also re-issued our SSL certificates. <\/p>\n

\nIf it’s been patched, then why
\n should I change passwords?<\/h3>\n

While we have applied the patch earlier
\n this week, there is still a potential that your password
\n could have been previously exposed and extorted as it
\n passed through the internet via the encrypted SSL tunnel.
\n Again, we have no confirmed reports of suspicious
\n activity or hijacked passwords, but in the spirit of
\n security we strongly urge users to proactively update
\n their passwords. We urge you to do your diligence
\n and change any online passwords you may have and confirm
\n with your other providers (hosting, banking, social media,
\n etc) that their SSL protocols have been patched.<\/p>\n

\nWill you force a password
\n change?<\/h3>\n

Since we have no confirmed compromise
\n and do not assume there was any with the Heartbleed bug,
\n we are simply notifying our customers and strongly urging
\n them to change their passwords.<\/p>\n

\nCan you setup a policy to force
\n users to change passwords on next login?<\/h3>\n

Unfortunately, we cannot provide this
\n service at this time.<\/p>\n

\nIs there a way to mass change
\n passwords?<\/h3>\n
    \n
  1. Administrators can change passwords
    \n on individual mailboxes via the control panel at     admin.thexyz.com<\/a>.\n <\/li>\n
  2. Email users can change their
    \n own passwords via the Webmail portal at     webmail.thexyz.com<\/a>.<\/li>\n<\/ol>\n

    \nHow can I send a message to
    \n email all of my users?
    \n <\/h3>\n

    You can send an email to everyone on your domain.
    \n To email everyone, log into the control panel, and
    \n perform the following steps:<\/p>\n

      \n
    1. Mouse over the Go to section<\/strong>
      \n drop-down menu and select Domains<\/strong>.<\/li>\n
    2. In the Tools<\/strong> section, click
      \n the Email Everyone<\/strong> link.<\/li>\n
    3. If you have multiple domains, select the
      \n appropriate domain name. Or, to change domains
      \n at any time, click the change domain<\/strong>
      \n link.<\/li>\n
    4. Click the Email Everyone<\/strong>
      \n link.<\/li>\n
    5. Enter the
      \n following information in the spaces provided:<\/p>\n