2 ms·
I don't have first hand experience of this, but I have read several things suggesting that a big part of the problem with OpenSSL is the API - that it doesn't h
by rkangel 6y ago
I don't have first hand experience of this, but I have read several things suggesting that a big part of the problem with OpenSSL is the API - that it doesn't help you to make sensible security decisions. A large part of the design of RusTLS seems to be to have sensible defaults and to not make available insecure algorithms.
That said, we shouldn't let perfect be the enemy of good. An OpenSSL compatible implementation with no memory issues would definitely be good.
- adev_ 6y agoYes. One of the main problem of OpenSSL is how messy is the API itself. There is a pretty good talk about it by the libreSSL guys on that [1] [1]: https://www.youtube.com/watch?v=Wd_dyRbE4AA https://www.youtube.com/watch?v=Wd_dyRbE4AA