BigCommerce: Investigating: OpenSSL DROWN security issue
Timeline of updates
- resolved
Bigcommerce engineers have confirmed that the Bigcommerce platform and all stores are not affected by the recently announced "DROWN" SSL vulnerability. The vulnerability targets an old SSL protocol (SSLv2) which is not supported on the Bigcommerce platform.
From BigCommerce’s published incident history: for incidents before Rewindex began polling this status page, only the final update text is available.
Archive proof
Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert.
How the archive is checked, and what it cannot prove.
This incident predates live tracking (October 17, 2026). It came from the vendor’s own published history, which is not covered by checkpoints.
Impact, status and times are the vendor’s own, as last archived. View on status.bigcommerce.com (opens in new tab).
Cite this
Status incident (vendor impact label: none) posted by BigCommerce, started 2016-03-01 14:59 UTC, resolved after 34 min, 1 update(s).
- Title
- Investigating: OpenSSL DROWN security issue
- Vendor
- BigCommerce
- Date
- URL
- https://rewindex.com/company/bigcommerce/incidents/41fy33q3f7g7
BigCommerce profileRecent BigCommerce incidentsAll outages on March 1, 2016BigCommerce in March 2016MarkdownJSON