4 ms·
No! Let's have many implementations all with completely separate code bases. Then when the next security bug is found it won't affect the whole internet.
by cwp 11y ago
No! Let's have many implementations all with completely separate code bases. Then when the next security bug is found it won't affect the whole internet.
- mattbillenstein 11y agoI can see that side of it, but when N >> M I don't really see how that helps things significantly. N = number of https sites M = number of tls implementations
- cwp 11y agoYou don't think N(M-1)/M sites not being affected by the next heartbleed wouldn't be significant?