OpenSSL warns of critical security vulnerability with upcoming patch

zdnet.com

15 pointsCrankyBear7 comments

Open articleView on HN

We really need to drop OpenSSL... It's same as Sendmail and Bind before - permament and guaranteed vulnerability.

Are you going to write your own OpenSSL library?

Wikipedia TLS comparison page lists 17 alternatives.

How reliable are they, and how many vulnerabilites do they have waiting to be found?

Well... https://www.libressl.org/ seems to be working out pretty well?

not really https://lwn.net/Articles/841664/

Oh, hadn't heard about that. I use OpenBSD mostly so I wasn't really paying attention to its adoption on the Linux side.. good to know though, thanks for the link!

Reply on news.ycombinator.com