15 ms·
This line is a bit concerning to me: "and libtls-bearssl, an alternative implementation of libtls based on BearSSL" It sounds like a custom rolled variant of a
by jrexilius 4y ago
This line is a bit concerning to me: "and libtls-bearssl, an alternative implementation of libtls based on BearSSL" It sounds like a custom rolled variant of a low-adoption SSL lib that isn't itself very well tested.. It may be better.. it may be horribly flawed or backdoored in a non-obvious way. But I also get how horrible OpenSSL is..
- synergy20 4y agosame here, in fact the last bearssl release was 4 years ago, very inactive if still alive. mbedtls might be better here, but it does not have tls1.3 fully ready(I don't think bearssl has 1.3 either). wolfssl could be the best, small and robust with new features, it is dual licensed if you want to use it in commercial releases.