3 ms·
Why? Surely OpenSSL has a bigger team auditing the codebase, especially recently since they've gotten so much attention for previous security failures. Also, G
by beatgammit 8y ago
Why? Surely OpenSSL has a bigger team auditing the codebase, especially recently since they've gotten so much attention for previous security failures.
Also, Go's TLS library is missing some important features, like decrypting most varieties of private keys.
I use Go's TLS library, but I don't think it's necessary "better" than openssl, though it's certainly more convenient.
- andy_ppp 8y agoI'm making no definitive statements just more interested that they did it. I would personally trust a new Go codebase over an old C codebase but I could definitely be wrong in this case.