add comments for the heartbleed bug, see: http://www.openssl.org/news/secadv_20140407.txt