5 ms·
If TLS/HTTPS was easy to use from userspace C, HTTP could probably phase out very soon. Node, Go, Python, and other web tech actually makes this easier, because
by jwatte 10y ago
If TLS/HTTPS was easy to use from userspace C, HTTP could probably phase out very soon. Node, Go, Python, and other web tech actually makes this easier, because I don't have to call OpenSSL myself. So, even though I really love C, it's not in the best place for the modern network.
- hobarrera 10y agoVery few applications actually add the TLS layer themselves. Most apps webapps are behind a forwarder that does the security part. I believe the only places where you'd use C is web servers themselves.
- aaronmdjones 10y agoARM MbedTLS makes using TLS from C easy. Like, really easy. Really, really easy. As an aside, the last CVE (publicly known, logged vulnerability) for MbedTLS that affected server-side code was from January 2015.