Comparison of SSL Labs TLS Scores with Different Go Versions

Re:Comparison of SSL Labs TLS Scores with Different Go Versions by tptacek on Wednesday February 03, 2016 @11:14AM (#11027271)

Zero is the number of TLS experts I know that would unreservedly recommend PolarSSL over Go's crypto/tls. I know several who wouldn't even recommend it over OpenSSL, but it's worth remembering that not only does Go's TLS not use OpenSSL, but it's curated by one of the world's experts in TLS security.

Go has one of the best TLS stacks in the world, and I expect the distinction to become starker in the future; in a few years, barring something unexpected from something like BoringSSL, it may end up being unquestioned best TLS stack.

[ Parent | on HN ]

Re:Comparison of SSL Labs TLS Scores with Different Go Versions by arca_vorago on Wednesday February 03, 2016 @03:10PM (#11029359)

Thanks for the info tptacek, do you have any reading along these lines that goes into any detail on this? From what I have been reading go tls is nice but computationally more intensive. I really like to go for the best wherever I can, so I am genuinely interested if anyone else has any input on this.

[ Parent | on HN ]

Re:Comparison of SSL Labs TLS Scores with Different Go Versions by faeron on Thursday February 04, 2016 @05:16AM (#11033023)

Go has one of the best TLS stacks in the world

Do you have any proof to support this claim?

[ Parent | on HN ]

Re:Comparison of SSL Labs TLS Scores with Different Go Versions by lazyjones on Wednesday February 03, 2016 @11:34AM (#11027392)

> Go has one of the best TLS stacks in the world,

Go suffers a bit from weak random numbers though (crypto/rand Read() output), says dieharder at least: http://nopaste.narf.at/show/31060/

I'm not sure how severe that is...

[ Parent | on HN ]

Re:Comparison of SSL Labs TLS Scores with Different Go Versions by tptacek on Wednesday February 03, 2016 @11:34AM (#11027397)

Horseshit. Go's crypto reads from urandom, just like Nacl.

[ Parent | on HN ]