does not appear to suffer from Debian OpenSSL vulnerability

diff --git a/2008-06-23-ssh-keygen.txt b/2008-06-23-ssh-keygen.txt
index 9e1be7ef0c1ed864188ccc98b39831960b58ea8d..a2e31dbf35ba1101eec551ad7740bb9f22acf38e 100644 (file)
--- a/2008-06-23-ssh-keygen.txt
+++ b/2008-06-23-ssh-keygen.txt
@@ -61,7 +61,9 @@ However, in case you do, here are a few reasons:</p>
  <li>
   Sure, Debian is in an awkward position here given the recent OpenSSL
   random number generation vulnerability. However, how do you know that
-  sshkeygen.com is running on a system that doesn't suffer from this?
+  sshkeygen.com is running on a system that doesn't suffer from this? (As it
+  happens, I have checked, and it doesn't appear to suffer from this
+  vulnerability - but most people won't check and won't know how to check.)
  </li>
 </ul>