3 ms·
Yup. Hard to read! Better that than not to read it. As Rich Salz said in the post to openssl-dev, this is a prototype that nobody should take and use straigh
by brians 13y ago
Yup. Hard to read! Better that than not to read it.
As Rich Salz said in the post to openssl-dev, this is a prototype that nobody should take and use straight. We did think we were pretty lucky that our old patch to keep keys from being swapped to disk could help us against Heartbleed. A major voice in the internal decision about whether to release it or keep it secret as a "competitive advantage" was the possibility that we were wrong---in the hopes that someone would discover this and tell us if so. We were wrong. Pinckaers discovered this, and told us so.
He can mock my coffee as weak and my nose as big for all I care, in return for that necessary warning that we were mistaken.
- tptacek 13y agoYou probably meant something subtly different than what "competitive advantage" sounds like, w/r/t hardening the public OpenSSL code. :)