5 ms·
So, like some sort of shared library that my programs dynamically communicate with? How is this functionally different from a shared object?
by joejev 8y ago
So, like some sort of shared library that my programs dynamically communicate with? How is this functionally different from a shared object?
- AnIdiotOnTheNet 8y agoIt isn't really. The actual big problem with shared libraries is that developers cannot be trusted not to change their interfaces or behavior and break things. That's true regardless of what mechanism you use to share code.
- a1369209993 8y ago> How is this functionally different from a shared object? Because it's a separate process, so when it crashes your application can put up a "SSL failed, reconnecting" message and carry on. Also when your application has read-something-somewhere security vulnerability, it can't compromise your SSL keys. Nitpick: it's not one process, but one executable; you can have multiple SSL daemons using the same (read-only) binary, so a attack on one only gets one set of keys. (The same attack will probably work on every instance of the same version of SSLd, but shared objects don't fix that.)