4 ms·
Apple has SecureTransport[1] and it is open source[2], it had the goto fail bug from earlier this year. Shoving money at the problem isn't necessarily the answe
by aroch 13y ago
Apple has SecureTransport[1] and it is open source[2], it had the goto fail bug from earlier this year. Shoving money at the problem isn't necessarily the answer. The problem is the TLS spec is a confusing, arcane spec riddled with tons of gratuitous addons and extensions. Implementing all or even most of it without error/bus is simply a very hard problem
[1]: https://developer.apple.com/library/mac/documentation/security/Reference/secureTransportRef/Reference/reference.html https://developer.apple.com/library/mac/documentation/securi...
[2]: http://opensource.apple.com/source/libsecurity_ssl/libsecurity_ssl-55003/lib/SecureTransport.h http://opensource.apple.com/source/libsecurity_ssl/libsecuri...