A vulnerability in HTTPS servers was due to NSA meddling that weakened some of the software.