5 ms·
Only out of abundant caution, it seems. I mean, Cloudflare is using it.
by rainworld 7y ago
Only out of abundant caution, it seems. I mean, Cloudflare is using it.
- ownagefool 7y agoThe author has specifically said it'll be considered released when it's in the kernel, which makes the parents point kinda mute.
- panarky 7y agohttps://grammarist.com/usage/moot-mute/ https://grammarist.com/usage/moot-mute/
- ComputerGuru 7y agoCloudflare is not the golden standard for security.
- vsareto 7y agoWho is?
- all_blue_chucks 7y agoOpenBSD
- tptacek 7y agoI don't know a lot of serious systems security people who actually believe that. OpenBSD is fine, and smart people work on it, but it's been a long time since the early 2000's.
- all_blue_chucks 7y agoAFAIK it remains the single most selective platform out there. If a project is included in an OpenBSD release you know it has undergone serious whitebox scrutiny for security issues. I'm not aware of any platform that is quite so pedantic at the source code level.
- aquabeagle 7y agoAnd yet: https://news.ycombinator.com/item?id=22175431 https://news.ycombinator.com/item?id=22175431
- tptacek 7y agoI've said pretty much all I have to say about this, here: https://news.ycombinator.com/item?id=7071219 https://news.ycombinator.com/item?id=7071219
- coolsunglasses 7y agoWhat's the history there?
- PhilippGille 7y agoThe protocol yes, but don't they use their own implementation? https://github.com/cloudflare/boringtun https://github.com/cloudflare/boringtun
- tw04 7y agoSure, but the underlying codebase hasn't had a public audit for boringtun or wireguard, so they're both in the same boat.
- Hamuko 7y agoCloudflare is also cautioning against using their own implementation in production.