alt Hacker NewsDidn't they say it already? They basically think that the OpenSSL API is convoluted. That's my understanding of the comment above, at least.
Didn't they say it already? They basically think that the OpenSSL API is convoluted. That's my understanding of the comment above, at least.
Unnecessarily complicated APIs are a security code smell precisely because they help hide bugs, leaky abstractions, insecure state, and other exploitable issues.