Re:Was the iOS SSL Flaw Deliberate?
by tptacek on Thursday February 27, 2014 @11:53AM
(#7313233)
It's hard to design a good TLS test suite, for at least a couple reasons:
* The TLS stacks all have different APIs, and you'll need some fine-grained configuration over client options to exercise the code.
* There are only a few important TLS stacks, and the effort required to build a test suite is probably greater than the effort required to build a TLS stack.
It would still be a cool project. If it exists, I'd love to hear about it.
* The TLS stacks all have different APIs, and you'll need some fine-grained configuration over client options to exercise the code.
* There are only a few important TLS stacks, and the effort required to build a test suite is probably greater than the effort required to build a TLS stack.
It would still be a cool project. If it exists, I'd love to hear about it.