Post by @shinmera@mastodon.tymoon.eu

@shinmera@mastodon.tymoon.eu 51 min. ago

Years and years ago when there was a big openssl controversy, a number of from-scratch implementations of TLS stacks started popping up, like BearSSL and whatnot.

Did any of those ever reach any sort of maturity? And importantly: do any of them remain that haven't been slopped?

0 Boosts

1 Like

Haelwenn /элвэн/ :triskell:

@lanodan@queer.hacktivis.me 22 min. ago

@shinmera As far as I can tell BearSSL and GnuTLS (meh) are the only non-slopped ones.

Yukari Hafner :v_lesbian:

@shinmera@mastodon.tymoon.eu 14 min. ago

@lanodan Ah, good to know. Last I'd checked BearSSL there wasn't much activity, seems that's still the case though there have been a few spurious commits over the years.

Haelwenn /элвэн/ :triskell:

@lanodan@queer.hacktivis.me 10 min. ago

@shinmera Yeah, I kind of regard it as software that's effectively done except for it's lack of TLS1.3 support.

At least OpenSSL and the like end up with a *lot* more activity due to being general-purpose libraries and sometimes caring about niche hardware features like acceleration or RNGs.

Cassandrich

@dalias@hachyderm.io 18 min. ago

@lanodan @shinmera BearSSL is great but doesn't yet have TLS 1.3 because of TLS 1.3 has misfeatures that make it hard to implement well. If 1.3 ever becomes mandatory I'm sure there'll be a solution of some sort. For now 1.2 is fine.

Haelwenn /элвэн/ :triskell:

@lanodan@queer.hacktivis.me 7 min. ago

@dalias @shinmera Yeah, 9front's tls library also doesn't have TLS1.3 support and I guess it's for similar reasons as BearSSL.

Discussion

Discussion