Hacker News new | ask | show | jobs
by duxup 2161 days ago
What kind of things are we talking about that someone would add to OpenSSL outside of its core functions?
1 comments

Extensions to SSL, such as the SSL heartbeat extension (RFC 6520)... the one where the Heartbleed bug was found in. Other cipher suites would be another example.

The criticism here is that OpenSSL wasn't particularly choosy in which features of SSL (or other crypto in general) that it supported; it supported all of them, even if they were of more questionable utility.

The perils of being the reference implementation.