Miss Dada  🏳️‍⚧️

idk it seems bad to me that openssl implements both fundamental cryptographic algorithms, *and* a bunch of protocol/policy stuff. seems like they should be separate things. idk

today I learned it delegates part of the verification process to the caller, after doing its own built-in checks, but this interface is done in a way that means the caller can simply override and ignore the built-in checks

like I was being flippant when I said I'd simply make it easy to implement correctly but this is the sort of interface that something like this should not have