[jpsb]

FYI, that this means is that the NSA has every password you have ever used on-line. Https or secure http uses RSA algorithms. I would advise changing on-line passwords once https dumps RSA.

The above assume this story is not BS, I am hoping the story is BS.

[Campion]

Https or secure http uses RSA algorithms.

The RSA public-key encryption algorithm and the RSA company aren't the same thing, and nobody's alleging that the RSA PK algorithms are compromised.

This story concerns a specific product (BSAFE, a suite of cryptography libraries) sold by a specific company (RSA, a division of EMC). There are many open-source and other implementations of the RSA public-key encryption algorithm that contain no RSA (the company) code at all.

(Considering what RSA charges for BSAFE -- I've priced it before -- I'm surprised anyone uses it for anything.)