[alextgordon]

Isn't that discredited by Apple's "goto fail" bug? A critical function was mistakenly circumvented in an extremely transparent way, and yet the source code sat on their website for a long time without anybody noticing. Nobody even ran coverity on it.

[fleshweasel]

goto fail was in OpenSSL which many organizations use, but your point still stands.

[stouset]

No, this was a bug in SecureTransport, Apple's custom TLS implementation.

[fleshweasel]

Oops. You're right. Sorry.