News for hackers. Stuff that matters.
Re:Chrome: From NSS to OpenSSL by thrownaway2424 on Thursday April 10, 2014 @02:11PM (#7568484)
Google has already written and released a complete crypto stack for Go. Where you restricting your comments to C/C++ implementations?
Re:Chrome: From NSS to OpenSSL by richm44 on Thursday April 10, 2014 @04:52PM (#7569618)
The last time I looked at it the go stack was very weak compared to any of the mature C SSL stacks. IIRC it only took me a few minutes to find a security bug (which I reported and is now fixed) that I'd reported against various browsers several years earlier. In short, I highly doubt the go SSL stack is production ready.
Re:Chrome: From NSS to OpenSSL by thrownaway2424 on Thursday April 10, 2014 @09:58PM (#7570854)
The above questioner didn't ask whether it was any good, only whether Google could write and release one.
Re:Chrome: From NSS to OpenSSL by Raphael on Thursday April 10, 2014 @05:00PM (#7569670)
Good point. Though it only claims to "partially implement TLS 1.2". http://golang.org/pkg/crypto/tls/