idk it seems bad to me that openssl implements both fundamental cryptographic algorithms, *and* a bunch of protocol/policy stuff. seems like they should be separate things. idk
Show this thread
-
as in, you pass a function pointer to openssl, and it calls it with an int saying if its own checks passed or not. your function can simply, ignore this int, if it wants to
Show this thread
-
-
I would simply not pass this int to an untrusted function
-
ah yeah hmm this server's certificates are all busted. what do you reckon, random piece of code I've not reviewed and have just been linked to
- 3 more replies
New conversation -
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.