4 ms·
Show me a quality implementation of SSL/TLS I can use ? All the ones I've looked at are shitty source code.
by phkamp 12y ago
Show me a quality implementation of SSL/TLS I can use ?
All the ones I've looked at are shitty source code.
- wmf 12y agoWhy hold yourself to a much higher standard than your customers do? Even though OpenSSL is shitty, everyone still uses it.
- phkamp 12y agoThat's actually a very good question, thank you for asking it. Because I think that we can do much better than the pile of IT-shit we have produced until now. I am actively trying to do that, through my own code, through the articles that I write and through the discussions I engage in. Not everybody has the luxury of doing that -- the kids have to be fed and the mortgage has to be paid and a job is a job -- but those of us who can, have an obligation to try to make the world a better place, by raising quality if IT.
- yellowapple 12y agoWhat about LibreSSL? -- Freely licensed -- Has been ported to FreeBSD -- Is certainly less of a tangled mess than OpenSSL
- phkamp 12y agoIt is certainly a step in the right direction, my main worry is that the OpenBSD crew has a tendency to to -- SQUIRREL!! and forget their old toy when they spot a new shiny one.
- yellowapple 12y agoThey do? I personally haven't seen much of that, though I'm admittedly relatively new to the BSD world, so perhaps I just haven't been watching/using the BSDs long enough to notice that sort of tendency in OpenBSD relative to the others. I know they've been making a lot of switches lately in terms of what ships with the base OS, but pretty much all of them (that I know of) have been more akin to forgetting someone else's old toys and playing with their own shiny new ones. OpenSSH and PF in particular seem to still be alive and well, and they've been around for quite a long time.