3 ms·
Reading chapter 3, upgrading from 1.1.1, it seems strange for a security library to promote ignoring and even suppresing warnings. The best option, upgrading,
by hyperman1 6y ago
Reading chapter 3, upgrading from 1.1.1, it seems strange for a security library to promote ignoring and even suppresing warnings. The best option, upgrading, is mentioned last.
I would prefer my security libraries to scream bloody murder if I am using them in a deprecated way.
- saagarjha 6y ago“Deprecated” need not mean “insecure”.
- hyperman1 6y agoAre you willing to take the risk? Deprecated might mean: There are known weaknesses. Or: Less reviewed code path.
- dtech 6y agoAs an initial upgrade, that is a decent strategy. Staying behind is even more insecure.
- kroeckx 6y agoIt's mostly about deprecating old APIs where a newer more general API is available, sometimes for more than 10 years.
- user5994461 6y agoDeprecated can mean anything. They cannot remove any function due to being a C shared library. Removing functions or global symbols would break linking and runtime initialization.