4 ms·
BoringSSL is now very widely used. There is also rustls (fully safe rust code) with OpenSSL API available.
by rapsey 6y ago
BoringSSL is now very widely used. There is also rustls (fully safe rust code) with OpenSSL API available.
- earthboundkid 6y agoYeah. Thinking about it seriously, the problem is that if you do a “drop in replacement” you’ve just recreated all the existing bugs. If you don’t do a drop in replacement, adoption will be poor, see BoringSSL etc. It’s sort of no-win.
- jeffbee 6y agoConsidering that BoringSSL is the library in Chrome, Android, iOS, and Google's GFE, I imagine it's adoption is not "poor". It is probably the most widespread TLS implementation, by traffic.
- rapsey 6y agoAlso cloudflare
- earthboundkid 6y agoOkay, but today I upgraded my Ubuntu box which had the OpenSSL bug on it. Why does my Ubuntu box use OpenSSL? I haven't looked into it, but I imagine Python is using it and God knows what else. Can those things move to BoringSSL? Probably, long term, but they haven't yet because it's non-trivial. No easy answer here. It will probably just take a decade of slowly moving everything using OpenSSL onto something else, piece by piece.