3 ms·
Among the good and bad stories this year, so far, LibreSSL is the good story of the year. Also happy to hear a bit about the ressl API. To me it sounds like a
by Panino 12y ago
Among the good and bad stories this year, so far, LibreSSL is the good story of the year.
Also happy to hear a bit about the ressl API. To me it sounds like a focused, high-level API that makes it easy to get right and hard to get wrong. So kind of like NaCl. It's clearly the future -- look at the huge amount of software being written for Sodium now, for example. It's huge.
- rakoo 12y agoThe very same tedunangst wrote a piece about this API: http://www.tedunangst.com/flak/post/goreSSL http://www.tedunangst.com/flak/post/goreSSL In which you can see the clear focus on usability rather than capability. To examplify how easy it is, he actually implements the API with a go "backend". I also really like the concept of a simple API where you can't go wrong by default, hope it can make its way into other pieces of software as well.
- ianlevesque 12y agoRelatedly is there an SSL implementation based on NaCL anywhere?
- jfindley 12y agoNot exactly the same thing, but there's CurveCP which is essentially a TCP replacement for creating encrypted communication tunnels. It is part of NaCL and uses the same crypto primitives. It's a really interesting project, but it's not ready for production use just yet, and even when it is I don't think that replacing SSL is necessarily what it's targeting.