Comment Comment by api "demonstrably safe" -- this is another issue I have with this crypto conservative FUD."Use SSL, don't roll your own!"Then we get BEAST, CRIME, Heartbleed, etc., and we discover that the dominant SSL/TLS implementation is a rat's nest of comically awful code:http://opensslrampage.orgLook at the older posts for LuLz like: http://opensslrampage.org/post/83007010531/well-even-if-time...I wonder just how much scrutiny IPSec implementations have gotten, especially since it's such a usability nightmare that nobody uses it. parent api 11 years ago
"Use SSL, don't roll your own!"
Then we get BEAST, CRIME, Heartbleed, etc., and we discover that the dominant SSL/TLS implementation is a rat's nest of comically awful code:
http://opensslrampage.org
Look at the older posts for LuLz like: http://opensslrampage.org/post/83007010531/well-even-if-time...
I wonder just how much scrutiny IPSec implementations have gotten, especially since it's such a usability nightmare that nobody uses it.