undefined | Better HN

0 pointspilif9y ago0 comments

disabling system-wide is pretty much impossible. If OSes added such a toggle, people would start using their own SSL stack and overall security would suffer (because people won't be keeping their SSL stacks up to date)

0 comments

sjtgraham9y ago

This is already a reality. There are at least 5 banking apps I can think of that statically link OpenSSL and use that instead of OS crypto.

j / k navigate · click thread line to collapse

0 pointspilif9y ago0 comments

disabling system-wide is pretty much impossible. If OSes added such a toggle, people would start using their own SSL stack and overall security would suffer (because people won't be keeping their SSL stacks up to date)

0 comments

sjtgraham9y ago

This is already a reality. There are at least 5 banking apps I can think of that statically link OpenSSL and use that instead of OS crypto.

j / k navigate · click thread line to collapse