5 ms·
> Disjoint versions would be good. Has it ever been tried? I believe Signal does this based on the papers I’ve read; I’m sure many private or lesser-known prot
by tatersolid 8y ago
> Disjoint versions would be good. Has it ever been tried?
I believe Signal does this based on the papers I’ve read; I’m sure many private or lesser-known protocols do as well.
>would it have prevented, say, heart bleed?
Probably, because in a strictly versioned scheme with no options, the buggy DTLS keepalive mechanism would not even have been in the same library. OpenSSL’s position of “we’ve got nine of everything including the kitchen sink” was the true cause of Heartbleed. Simpler code is easier to get right, debug, and perhaps formally verify as correct.