4 ms·
Yes, a good API with good documentation is important. Fortunately, OpenSSL has improved significantly in the last few years. Unfortunately, I've talked with cr
by agwa 6y ago
Yes, a good API with good documentation is important. Fortunately, OpenSSL has improved significantly in the last few years.
Unfortunately, I've talked with crypto experts about GnuTLS's bizarre session ticket key rotation system and nobody can figure out what the heck GnuTLS was trying to accomplish with it. It doesn't rotate anything important, and by implementing it they accidentally introduced this critical all-zero key bug. This is the hallmark of amateurs.
- weare138 6y ago>Fortunately, OpenSSL has improved significantly in the last few years. After Heartbleed was discovered. I think it's the TLS specification itself that's the problem. It's ridiculously complex and difficult to implement correctly to the point even the experts struggle with it.