3 ms·

In case anyone's curious, here's a link to the libsecurity_ssl source (albeit not totally up to date — latest version is pre-"goto fail;" fix): http://opensour

by grrowl 13y ago

In case anyone's curious, here's a link to the libsecurity_ssl source (albeit not totally up to date — latest version is pre-"goto fail;" fix): http://opensource.apple.com/source/Security/Security-55471/libsecurity_ssl/ http://opensource.apple.com/source/Security/Security-55471/l...

thefreeman 13y ago
I guess we see how well that worked out for them.
- sarreph 13y ago
  Well... Certainly better right now.
- coldtea 13y ago
  Compared to what? You are aware that GnuTLS had a very similar "goto" style verification bypass bug, and that OpenSSL has had several flaws and broken stuff discovered, including the major recent "Heartbleed Bug".