5 ms·
But, I don't want to do TLS. I'm not in the encryption business. Instead, I just want to send data across the network. The OS used to do the networking for m
by adamtj 12y ago
But, I don't want to do TLS. I'm not in the encryption business. Instead, I just want to send data across the network.
The OS used to do the networking for me. It exposes the BSD sockets API, which is pretty simple and nice but is unfortunately no longer safe to use. Yet, the kernel doesn't offer anything else.
So you're right, but you don't go far enough. It should all be in the kernel. Instead of tls_config_set_cert_file() we should be using setsockopt(2). Until we can, however, we'll have to rely on user-space libraries.
- AnthonyMouse 12y ago> It exposes the BSD sockets API, which is pretty simple and nice but is unfortunately no longer safe to use. This is the second time you've said something like this today. Explain what you mean by it. > So you're right, but you don't go far enough. It should all be in the kernel. Instead of tls_config_set_cert_file() we should be using setsockopt(2). Until we can, however, we'll have to rely on user-space libraries. I think what you mean is that it should be in the standard library. There is no reason it should have to be in the kernel.