News for hackers. Stuff that matters.
Re:Theo de Raadt on OpenSSL vulnerabilities coming on the 19th by rurban on Tuesday March 17, 2015 @11:24AM (#9218522)
You must been living on an island over the last years. "OpenSSL was the best SSL stack for years?" Best no, only fast.

PolarSSL (now "mbed TLS") is the best, to the best definition of best.

Still better than OpenSSL, which was known to be fast but insecure and poorly managed, are the stacks used the biggest clients:

  * NSS used by Chrome, Mozilla, et al 
  * GnuTLS used by exim, GNOME, et al.
I'm not at all grateful to the OpenSSL team for using horrible software practices and putting their clients into danger.

There are no comments on this comment yet.