TLS renegotiation vulnerability

My post was written before the full details of the issue were out (or, at
least, before I had seen them) and I was concerned that pinpointing the
problem within TLS precluded a needed discussion about how to prevent this in
future. I still think this is true, and Ben agrees with the need to think
about this problem more deeply. This was one of those cases where each
component seemed secure (with their respective, though possibly mistaken,
assumptions), but the system as a whole clearly wasn't.

As the moment, however, people are still scrambling to plug the leak so we
should thank those volunteers who are doing so.