Re: ODT Today
Chris Bannister <[email protected]>
| Newsgroups | gmane.org.user-groups.linux.dunedin.general |
|---|---|
| Message-ID | <20140420113813.GA6113@tal> |
On Wed, Apr 16, 2014 at 02:33:52PM +1200, Robin Sheat wrote: > Thomi Richards schreef op wo 16-04-2014 om 10:13 [+1200]: > > presumably it has lots of people involved in the project. > > I don't think that this is actually the case. > > Also, it's worth noting that openssl does a lot more than just crypto. > It does all the ASN.1 and X.509 stuff too. The heartbleed thing wasn't a > crypto issue, it was a protocol implementation issue. > > It's easy enough to write a bit of code that will do some crypto things. > It's hard to deal with all the extra stuff (protocol handling, avoiding > sidechannel attacks, avoiding standard attacks, etc.) These links are interesting regarding code problems. http://marc.info/?l=openbsd-misc&m=139715715931884&w=2 http://undeadly.org/cgi?action=article&sid=20140418063443 -- "If you're not careful, the newspapers will have you hating the people who are being oppressed, and loving the people who are doing the oppressing." --- Malcolm X _______________________________________________ DunLUG mailing list [email protected] http://lists.ethernal.org/listinfo/dunlug DunLUG Wiki - http://dunlug.kallisti.net.nz/