Re: exit code trigger for STARTTLS (Re: sslio as a STARTTLS wrapper)

Charlie Brady <[email protected]> writes:

> On Fri, 7 Jan 2005, Scott Gifford wrote:
>

[...]

>> I think a single-character on a pipe is probably better, though.  :)
>
> So you don't believe your own advocacy? :-)

I made a good case, but in the end I just wasn't able to see
eye-to-eye with myself.  :)

Hey, this is why I warned you I was still in brainstorming mode.  :)

>> I don't really have any objections to OpenSSL ...
>
> Its record tells us that it hasn't been designed from ground up to be 
> string/buffer safe.

Do you think matrixssl has better security, or that it's just newer
and less popular, so fewer bugs have been found?

>> or patching qmail-smtpd,
>
> Can't be included in binary distributions. 

Yeah.  I've been on the qmail list so long I sometimes forget the
license is horrible.  :)

----ScottG.