3 ms·
TLS implementation in Go. http://golang.org/pkg/crypto/tls/ http://golang.org/pkg/crypto/tls/ Go is probably better at this.
by aalpbalkan 13y ago
TLS implementation in Go. http://golang.org/pkg/crypto/tls/ http://golang.org/pkg/crypto/tls/
Go is probably better at this.
- somethingnew 13y agoAccording to Adam Langley, a Go contributor, it can still be side-channeled. https://twitter.com/agl__/status/453370970552532992 https://twitter.com/agl__/status/453370970552532992
- tptacek 13y agos/Go contributor/primary author of the Golang TLS package/g (Also, he's one of Google's point people on TLS.) JFWIW.
- dscrd 13y agoUnfortunately this library can only be used in Go, right?
- justincormack 13y agoYou could terminate connections with it and have a local socket to another process. As we have seen putting ssl in another process is helpful for memory isolation...
- wyager 13y ago>Go is probably better at this. Why? Go doesn't really offer a whole lot in terms of security, except for better managed memory. I'm not even sure you could reliably eliminate side channel attacks in Go.
- johntyree 13y ago>Go doesn't really offer a whole lot in terms of security, except for better managed memory. What makes it better? Haskell's GC is very advanced.
- wyager 13y ago>What makes it better? Better than C, that is. Haskell is on a whole 'nother level of "what are memory bugs?"
- dllthomas 13y agoOf course you can have memory bugs in Haskell, but it's obvious that you're doing special memory stuff. http://hackage.haskell.org/package/base-4.7.0.0/docs/Foreign-Storable.html http://hackage.haskell.org/package/base-4.7.0.0/docs/Foreign...