> but basically totally broken by design.
> http://www.interworx.com/community/is-ssl-tls-broken/
> but basically totally broken by design.
> http://www.interworx.com/community/is-ssl-tls-broken/
"Secondly, there’s the implementation. This is a bit more tricky because there’s plenty of scope for influencing either the software implementations or the standards upon which that implementation is based." vs. http://www.theregister.co.uk/2015/09/15/still_200k_iot_heart...
And if you think the vulnerabilities of the shocking state of openssl stop at heartbleed (which is as obvious as backdoors get), you've obviously not given the code even a cursory glance over.
https obviously greater than http But if you trust it with your life you wont have a life. It's as simple as that. (and tls is basic compared to tor, and even that we have seen is broken to hell and back, or silkroad would still be running.)
Signal and especially OTR are the current state of the art. Apple went the security by obscurity route and once again proved it's inferior.