2 ms·
It's a move to eliminate a dependency that provides no extra security (and likely weakens security). The dependency they want to eliminate (OpenSSL) ALREADY re
by LgWoodenBadger 9y ago
It's a move to eliminate a dependency that provides no extra security (and likely weakens security).
The dependency they want to eliminate (OpenSSL) ALREADY relies on the "different prng that could have bugs and could be used wrong."
The only thing they would gain is not having to handle platform-dependent issues reading from system's prng (which is only really different on Windows?).