A decade ago someone realised that the locks keeping swathes of the internet secure were not working. Openssl, a tool used to encrypt anything from social-media passwords to e-commerce purchases, had a fatal flaw that made the information it was supposed to protect visible to potential hackers.