Zero-day flaw found in web encryption

[Thankful]

http://news.zdnet.co.uk/security/0,1...9860592,00.htm

[lotuseclat79]

Additional information and a temporary OpenSSL patch:
HTTPS, SSL attack vector discovered; fix is on the way.

A serious security flaw in the TLS protocol could make HTTP communication vulnerable to a man-in-the-middle attack. Security researchers are working to address the issue.

-- Tom

[scott1256ca]

Can any of the experts at this site comment as to how concerned we should be about this in the near term, i.e. next couple of months? Are evildoers likely to start exploiting this immediately or will it take them some time?

Thanks