BearSSL – Smaller SSL/TLS

Re:BearSSL – Smaller SSL/TLS by pornin on Thursday November 03, 2016 @10:00AM (#12863970)

It is a combination of "many eyes" and "good documentation". What is needed is some good text that describes the design choice, the rationale, and all the tricky details; and then people who read it and think about it. I'll write and publish such text within the next few months.

[ Parent | on HN ]

Re:BearSSL – Smaller SSL/TLS by rdeboo on Thursday November 03, 2016 @10:39AM (#12864273)

So I guess it is going to take years.

Generally, open source software benefits from more users. But having a huge amount of users makes it more difficult to improve and cleanup because you can't just deprecate stuff easily. (like SSL2/3).

Also, having 100% of the internet using openssl makes the impact of a vulnerability in that library huge. Some diversity is probably a good thing.

I appreciate the time and effort that you are putting into it, good luck.

[ Parent | on HN ]

Re:BearSSL – Smaller SSL/TLS by xdej on Monday November 14, 2016 @05:00AM (#12948685)

You could use some of your 233,693 reputation points as bounties on security.SE to attract people to read and think about bearssl.

[ Parent | on HN ]

Re:BearSSL – Smaller SSL/TLS by baby on Thursday November 03, 2016 @05:16PM (#12868030)

any RSS feed to be able to catch that?

[ Parent | on HN ]