News for hackers. Stuff that matters.
Re:Not-quite-so-broken TLS by hannesm on Tuesday July 07, 2015 @12:23PM (#9846412)
some might have heard of this TLS stack as OCaml-TLS, but we rebranded it for our Usenix security paper. The paper includes an evaluation of common vulnerabilities in widely used TLS stacks in 2014.
Re:Not-quite-so-broken TLS by edwintorok on Tuesday July 07, 2015 @12:42PM (#9846517)
Is the rebranding just for the paper or you plan on keeping it? Or is it because you plan on making this available to non-OCaml applications as well (I think it was mentioned previously on HN that ctypes/cstubs could be used in reverse mode for this)?
Re:Not-quite-so-broken TLS by avsm on Tuesday July 07, 2015 @02:04PM (#9847060)
Definitely working on making it available to non-OCaml applications as well. The most obvious way is by using 'tlstunnel' to act as a TLS terminator to TCP, but also via inverted Ctypes to ship a shared library and C header files. More on that when it's working...