3 ms·

I've been out of the loop on Golang security for a bit, but last I recalled there might have been some timing vulnerabilities in the crypto library. Is this no

by tuxxy 9y ago

I've been out of the loop on Golang security for a bit, but last I recalled there might have been some timing vulnerabilities in the crypto library. Is this not the case anymore?

PopsiclePete 9y ago
Bunch of stuff was discovered and fixed relatively promptly: https://golang.org/doc/devel/release.html https://golang.org/doc/devel/release.html There was a pretty thorough audit that discovered some of those issues. I'm not aware of anything outstanding - they're pretty good about patching things promptly.