Introducing s2n, a New Open-Source TLS Implementation
blogs.aws.amazon.com
Introducing s2n, a New Open-Source TLS Implementation
1–10 of 104 posts
Re: Introducing s2n, a New Open-Source TLS Implementation
#2Very impressive, thanks Amazon!
Re: Introducing s2n, a New Open-Source TLS Implementation
#3[deleted]
Re: Introducing s2n, a New Open-Source TLS Implementation
#4[deleted]
[deleted]
Re: Introducing s2n, a New Open-Source TLS Implementation
#5Can you use this library without having to use its IO capabilities?
My biggest issue with OpenSSL is that it also tries to do IO, but does it in a not too well-performing and non cross-platform way.
Re: Introducing s2n, a New Open-Source TLS Implementation
#6I wonder if this could motivate others to try making even simpler implementations of TLS - essentially, an effort toward the bare minimum necessary to be secure.
The fact that they are focusing on the TLS protocol itself and not the actual encryption implementation is a good way to start; the "extraneous complexity" is not really in algorithms like RSA/ECDSA/AES since those are specified mathematically, but in the handling of the protocol messages and states. That is also where most of the bugs tend to be.
It reminds me of this Hoare quote: "There are two ways of constructing a software design: One way is to make it so simple that there are obviously no deficiencies and the other way is to make it so complicated that there are no obvious deficiencies."
Re: Introducing s2n, a New Open-Source TLS Implementation
#7[deleted]
Re: Introducing s2n, a New Open-Source TLS Implementation
#8Note that this library is currently only providing server functionality, and doesn't do certificate validation (in fact it appears to not do any of the X.509 parts of SSL/TLS). It's certainly interesting, but one of the reasons it's so small is that it's missing critical functionality for many use cases.
Re: Introducing s2n, a New Open-Source TLS Implementation
#9Glad to see that some of the big players are starting to get into the habit of giving back to the communities building the bricks their success was built upon. Facebook, Google, Apple, Amazon, Twitter, all of them have contributed major pieces of the web fabric in the past few years. The power and money they can divert to such operations is a key factor in producing mature tools which will help foster the web ecosystem in the end.
Re: Introducing s2n, a New Open-Source TLS Implementation
#10> s2n is short for “signal to noise”
Anyone else think this was a contraction of the a11y, i18n, a16z or f6s variety?