maybe you are already aware of the critical security issue within the Open Source implementation of SSL called OpenSSL.
There is a critical Vulnerability that grants an attacker access to the Stream of Data between the Client and the Server even if the attacker has recorded the whole Data stream of the last two years (It has gone public that this critical issue is in the OpenSSL implementation for two years now). This is possible via 64 kb small "Ping" signal that travels between the Client and the Server to check if the connection still active. This "Ping" can be compromised to read the Private Key out of the Server Memory.
For more Information please check the following Web Site: