Hacker News new | ask | show | jobs
by Thaxll 3896 days ago
Who knows that google was using OpenSSL?
2 comments

The security of a system should never rely on an attacker not knowing the details of the algorithm or implementation.

https://en.wikipedia.org/wiki/Security_through_obscurity

It is possible to fingerprint a TLS stack using its behaviour that a sysadmin can't change. People knew it was openssl.