Critical GnuTLS bug ...

2014-03-04 Thread Howard Chu
http://arstechnica.com/security/2014/03/critical-crypto-bug-leaves-linux-hundreds-of-apps-open-to-eavesdropping/ Perhaps folks will take us more seriously the next time we say don't use GnuTLS ... http://www.openldap.org/lists/openldap-devel/200802/msg00072.html -- -- Howard Chu CTO,

Re: Critical GnuTLS bug ...

2014-03-04 Thread Erwann Abalea
While I disagreed with you on some PKI-related topics, I fully agree with you on that specific one. GnuTLS is bad. (back reading that new triple handshake TLS attack) 2014-03-04 20:40 GMT+01:00 Howard Chu h...@symas.com: http://arstechnica.com/security/2014/03/critical-crypto-bug-leaves-linux-

Re: Critical GnuTLS bug ...

2014-03-04 Thread Michael Ströder
Howard Chu wrote: http://arstechnica.com/security/2014/03/critical-crypto-bug-leaves-linux-hundreds-of-apps-open-to-eavesdropping/ Perhaps folks will take us more seriously the next time we say don't use GnuTLS ... http://www.openldap.org/lists/openldap-devel/200802/msg00072.html While I

Re: Critical GnuTLS bug ...

2014-03-04 Thread Howard Chu
Michael Ströder wrote: Howard Chu wrote: http://arstechnica.com/security/2014/03/critical-crypto-bug-leaves-linux-hundreds-of-apps-open-to-eavesdropping/ Perhaps folks will take us more seriously the next time we say don't use GnuTLS ...