6 ms·

TLS implementation in Go. http://golang.org/pkg/crypto/tls/ http://golang.org/pkg/crypto/tls/ Go is probably better at this.

• somethingnew 12y ago
  According to Adam Langley, a Go contributor, it can still be side-channeled. https://twitter.com/agl__/status/453370970552532992 https://twitter.com/agl__/status/453370970552532992
  • tptacek 12y ago
    s/Go contributor/primary author of the Golang TLS package/g (Also, he's one of Google's point people on TLS.) JFWIW.
• dscrd 12y ago
  Unfortunately this library can only be used in Go, right?
  • justincormack 12y ago
    You could terminate connections with it and have a local socket to another process. As we have seen putting ssl in another process is helpful for memory isolation...
• wyager 12y ago
  >Go is probably better at this. Why? Go doesn't really offer a whole lot in terms of security, except for better managed memory. I'm not even sure you could reliably eliminate side channel attacks in Go.
  • johntyree 12y ago
    >Go doesn't really offer a whole lot in terms of security, except for better managed memory. What makes it better? Haskell's GC is very advanced.
    • wyager 12y ago
      >What makes it better? Better than C, that is. Haskell is on a whole 'nother level of "what are memory bugs?"
      • dllthomas 12y ago
        Of course you can have memory bugs in Haskell, but it's obvious that you're doing special memory stuff. http://hackage.haskell.org/package/base-4.7.0.0/docs/Foreign-Storable.html http://hackage.haskell.org/package/base-4.7.0.0/docs/Foreign...