Hacker News new | ask | show | jobs
by thrownaway2424 4446 days ago
Google has already written and released a complete crypto stack for Go. Where you restricting your comments to C/C++ implementations?
2 comments

The last time I looked at it the go stack was very weak compared to any of the mature C SSL stacks. IIRC it only took me a few minutes to find a security bug (which I reported and is now fixed) that I'd reported against various browsers several years earlier. In short, I highly doubt the go SSL stack is production ready.
The above questioner didn't ask whether it was any good, only whether Google could write and release one.
Good point. Though it only claims to "partially implement TLS 1.2". http://golang.org/pkg/crypto/tls/