Re:Chrome: From NSS to OpenSSL
by thrownaway2424 on Thursday April 10, 2014 @02:11PM
(#7568484)
Google has already written and released a complete crypto stack for Go. Where you restricting your comments to C/C++ implementations?
[ Parent
| on HN ]
The last time I looked at it the go stack was very weak compared to any of the mature C SSL stacks. IIRC it only took me a few minutes to find a security bug (which I reported and is now fixed) that I'd reported against various browsers several years earlier. In short, I highly doubt the go SSL stack is production ready.
Re:Chrome: From NSS to OpenSSL
by thrownaway2424 on Thursday April 10, 2014 @09:58PM
(#7570854)
The above questioner didn't ask whether it was any good, only whether Google could write and release one.
Good point. Though it only claims to "partially implement TLS 1.2". http://golang.org/pkg/crypto/tls/