4 ms·

Uh, no. Implementation bugs don't mean a protocol is broken.

• deleted 10y ago
  [deleted]
• mSparks 10y ago
  Uh, good luck convincing anyone that April 2014 does anything other than demonstrate there are exactly zero reliable implementations of TLS. If the most widely used implementation can demonstrate that level of incompetence, what chance do any of the others have. And I don't care if pointing that out costs me mod points. Its seems on these types of conversations negative points are a mark of honesty.
  • jbg_ 10y ago
    If there are exactly zero reliable implementation of TLS, then these 10 BTC should be easy to collect: https://ownme.ipredator.se/ https://ownme.ipredator.se/
    • nixgeek 10y ago
      Why would you waste an extremely valuable exploit on a bounty worth under $6000 USD?
      • jbg_ 10y ago
        It’s not clear to me that an exploit of a vulnerability in a not-widely-used TLS implementation in native OCaml (or a vulnerability in any of the other software in use on that system) would be more valuable than the bounty offered.