Re:Not-quite-so-broken TLS
by hannesm on Tuesday July 07, 2015 @12:23PM
(#9846412)
some might have heard of this TLS stack as OCaml-TLS, but we rebranded it for our Usenix security paper. The paper includes an evaluation of common vulnerabilities in widely used TLS stacks in 2014.
[ Parent
| on HN ]
Re:Not-quite-so-broken TLS
by edwintorok on Tuesday July 07, 2015 @12:42PM
(#9846517)
Is the rebranding just for the paper or you plan on keeping it?
Or is it because you plan on making this available to non-OCaml applications as well (I think it was mentioned previously on HN that ctypes/cstubs could be used in reverse mode for this)?
Definitely working on making it available to non-OCaml applications as well. The most obvious way is by using 'tlstunnel' to act as a TLS terminator to TCP, but also via inverted Ctypes to ship a shared library and C header files. More on that when it's working...