3 ms·

We really need to drop OpenSSL... It's same as Sendmail and Bind before - permament and guaranteed vulnerability.

• Mailboxhead 4y ago
  Are you going to write your own OpenSSL library?
  • ectospheno 4y ago
    Wikipedia TLS comparison page lists 17 alternatives.
    • cpncrunch 4y ago
      How reliable are they, and how many vulnerabilites do they have waiting to be found?
  • amatecha 4y ago
    Well... https://www.libressl.org/ https://www.libressl.org/ seems to be working out pretty well?
    • SSLy 4y ago
      not really https://lwn.net/Articles/841664/ https://lwn.net/Articles/841664/
      • amatecha 4y ago
        Oh, hadn't heard about that. I use OpenBSD mostly so I wasn't really paying attention to its adoption on the Linux side.. good to know though, thanks for the link!