[bbwharris]

Standards are important. For all practical purposes OpenSSL has become a standard.

TCP can be exploited, it doesn't mean we ditch TCP for another differently exploitable solution.

I see your point but I don't think of OpenSSL as monoculture the same way that Windows or OSX are.

[sp332]

OpenSSL isn't a standard any more than winsock. And fortunately, OpenSSL isn't the only library that implements SSL.