News for hackers. Stuff that matters.

A comment on Was the iOS SSL Flaw Deliberate?. Parent comment

Re:Was the iOS SSL Flaw Deliberate? by tptacek on Thursday February 27, 2014 @10:44AM (#7312742)
No, not that I know of.
[ Parent | on HN ]
Re:Was the iOS SSL Flaw Deliberate? by astrodust on Thursday February 27, 2014 @11:29AM (#7313051)
There's the problem.

Plus, if there were tests, they just become another target.

[ Parent | on HN ]
Re:Was the iOS SSL Flaw Deliberate? by tptacek on Thursday February 27, 2014 @11:53AM (#7313233)
It's hard to design a good TLS test suite, for at least a couple reasons:

* The TLS stacks all have different APIs, and you'll need some fine-grained configuration over client options to exercise the code.

* There are only a few important TLS stacks, and the effort required to build a test suite is probably greater than the effort required to build a TLS stack.

It would still be a cool project. If it exists, I'd love to hear about it.

[ Parent | on HN ]
Re:Was the iOS SSL Flaw Deliberate? by rqebmm on Thursday February 27, 2014 @01:52PM (#7314111)
I bet the NSA has one to look for vulnerabilities like this though!
[ Parent | on HN ]