4 ms·
As Andy tweeted, we built that particular patch to keep unencrypted secrets off disk -- it actually was intended to provide tangible security benefit, it wasn't
by kevinr 13y ago
As Andy tweeted, we built that particular patch to keep unencrypted secrets off disk -- it actually was intended to provide tangible security benefit, it wasn't just paranoia:
https://twitter.com/csoandy/status/455307255895060480 https://twitter.com/csoandy/status/455307255895060480
- Serow225 13y agoIf you folks have used this technique for years as I believe it has been stated, any particular reason why it wasn't contributed back to OpenSSL earlier?