3 ms·
just so you know when TLS was committed to openSSL, the code used the vars 'payload' for []byte... not 'msg' or 'data'.... i wrote about it and some other fac
by mc_hammer 11y ago
just so you know
when TLS was committed to openSSL, the code used the vars 'payload' for []byte... not 'msg' or 'data'....
i wrote about it and some other facts and was downvoted to oblivion
another guy from the w3c team wrote an article "TLS is not HTTPS" but they are selling it as HTTPS, same name logo icon etc, and shipping it to the whole world, his post was removed also..
were heading towards a global root.
found the article: http://www.w3.org/DesignIssues/Security-NotTheS.html http://www.w3.org/DesignIssues/Security-NotTheS.html
my take on the situation: http://8ch.net/g/res/2200.html#2363 http://8ch.net/g/res/2200.html#2363
- mc_hammer 11y agoTLS implementation has already had 2 serious show-stopping bugs if i remember. and heartbleed on top of that. they were beginner crypto mistakes like reusing nonce/null nonce... and the new logjam bug keep downvoting guys the government needs you!
- sarciszewski 11y agoI suspect you're being downvoted for linking to 8chan.
- tedunangst 11y agoAnd/or people aren't much interested in reading about variable names.