Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

lern_too_spel has a point. Why write an entirely new SSL library when you can switch to an existing one that may already be mostly what you want?

https://xkcd.com/927/

Whether or not NSS is the one you prefer, that's up to you.

http://en.wikipedia.org/wiki/Comparison_of_TLS_implementatio...



What is so difficult to understand about someone being curious about the price tag for large crypto audits/development projects? I am sorry I do not have an xkcd comic to link to, hopefully I can explain this to you without pretty pictures: I am not asking about the price tag because of any specific software development project. I am asking because I am merely curious what the price tag would be. I have seen various discussions mentioning audits and rewrites as if everyone knew what the cost would be. I do not know what the price tag would be, and given the lack of genuine responses it seems a lot of people do not have any idea what the price tag would be.


Ok, I understand why you proposed this. But what's hard to understand is why you are taking a discussion of rational alternatives to your proposal with such... angst? negativity? Not sure what you're feeling.

Consider the converse situation. You are proposing a rational alternative to continuing with OpenSSL as it is. That's a reasonable contribution to a discussion and it is not taken as an attack against OpenSSL.

This is just a philosopher's discussion on a place called Hacker News in the middle of a work day. :)




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: