4 ms·
It looks like that's because it's backed by an established SSL library. So this is more of a safely-typed Rust wrapper around that (which means they aren't roll
by brundolf 6y ago
It looks like that's because it's backed by an established SSL library. So this is more of a safely-typed Rust wrapper around that (which means they aren't rolling their own crypto, which is typically considered a good thing)
- jedimastert 6y ago> which means they aren't rolling their own crypto I will point out that BoringSSL is also mainly developed by Google, so...kinda? I still trust it, just a kinda interesting fact
- brundolf 6y agoI think the intended meaning of "your own crypto" is "greenfield crypto"
- baby 6y agoI’d still rather use a pure rust implementation
- kachnuv_ocasek 6y agoOr they could've used a formally verified crypto library such as HACL*.