All SSL distros are now suspect
In crypto, the "crypto" is the hard part. But now in the space of two weeks we see that folks maintaining the crypto in C can't handle return values.As an industry we have accepted that these libraries are the standard plumbing of security for many years.And they are obviously based on standards.Some other standards are continuous and automated testing to ensure broken code does not make it to...