Re: matrixssl security (Re: exit code trigger for STARTTLS)

On Fri, Jan 07, 2005 at 06:36:23PM -0500, Charlie Brady wrote:
> On Fri, 7 Jan 2005, Scott Gifford wrote:
> > Do you think matrixssl has better security, or that it's just newer
> > and less popular, so fewer bugs have been found?

At any rate it's small.

> The latter is certainly possible. I'm just guessing that we've all learnt 
> enough that the former is also true.
> 
> Gerrit, have you looked at the code much?

I poked through it, thought the code it good quality, using a small
subset of libc functions, and decided that it's manageable.  I didn't
audit the code, or even read all of it, though.

Regards, Gerrit.