3 ms·
Battle testing sounds like something you'd do to a new implementation. But so far there's very little new in LibreSSL; it's just cleanups and bugfixes. Do you
by clarry 13y ago
Battle testing sounds like something you'd do to a new implementation. But so far there's very little new in LibreSSL; it's just cleanups and bugfixes. Do you battle test dead code removals and bug fixes?
- DanBC 13y agoYes. Otherwise you get the Debian SSL bug. https://www.schneier.com/blog/archives/2008/05/random_number_b.html https://www.schneier.com/blog/archives/2008/05/random_number...
- clarry 13y agoIf anything, battle testing failed to catch that bug. Some other form of testing could've caught it. Careful code review could've caught it. Battle testing evidently has failed to catch many of the OpenSSL bugs that have been fixed in LibreSSL.