[owenmarshall]

I feel like “written in a memory-safe language” is a fair selling point, especially when we are talking about a tool designed to accept completely untrusted data from the network and keep you safe from attackers with significant resources.

[chasil]

All of the "boring crypto" has been written in C.

https://cr.yp.to/talks/2015.10.05/slides-djb-20151005-a4.pdf

Unfortunately, Java encryption libraries are far from boring.

https://www.bleepingcomputer.com/news/security/bouncy-castle...

https://www.cvedetails.com/vulnerability-list/vendor_id-7637...

[Avamander]

People have done a lot of things, the track record so far has shown that to be a terrible idea.