4 ms·
lern_too_spel has a point. Why write an entirely new SSL library when you can switch to an existing one that may already be mostly what you want? https://xkcd.
by sunir 13y ago
lern_too_spel has a point. Why write an entirely new SSL library when you can switch to an existing one that may already be mostly what you want?
https://xkcd.com/927/ https://xkcd.com/927/
Whether or not NSS is the one you prefer, that's up to you.
http://en.wikipedia.org/wiki/Comparison_of_TLS_implementations http://en.wikipedia.org/wiki/Comparison_of_TLS_implementatio...
- dfc 13y agoWhat is so difficult to understand about someone being curious about the price tag for large crypto audits/development projects? I am sorry I do not have an xkcd comic to link to, hopefully I can explain this to you without pretty pictures: I am not asking about the price tag because of any specific software development project. I am asking because I am merely curious what the price tag would be. I have seen various discussions mentioning audits and rewrites as if everyone knew what the cost would be. I do not know what the price tag would be, and given the lack of genuine responses it seems a lot of people do not have any idea what the price tag would be.
- sunir 13y agoOk, I understand why you proposed this. But what's hard to understand is why you are taking a discussion of rational alternatives to your proposal with such... angst? negativity? Not sure what you're feeling. Consider the converse situation. You are proposing a rational alternative to continuing with OpenSSL as it is. That's a reasonable contribution to a discussion and it is not taken as an attack against OpenSSL. This is just a philosopher's discussion on a place called Hacker News in the middle of a work day. :)