2014-04-08 UTC
# 
pauloppenheim KevinMarks_: cert pinning helps other problems, but AFAICT not heartbleed. If the server is using openSSL 1.0.1 and has a TLS heartbeat, it was vulnerable to having memory contents read, which would include any private key.