undefined | Better HN

0 points9rx7mo ago0 comments

> but rather how happy everyone on the thread is (which means it's more useful than it should be due to a failure with the ecosystem).

More likely Go users are just happy in general. The Rust users always come across as being incredibly grumpy for some reason, which may be why that happiness — or what would be considered normalcy in any other venue — seems to stand out so much in comparison.

> We link against [...] OpenSSL

Which is kind of funny as Valgrind support was added specifically for the crypto package to help test tricky constant-time cases. You think that the failure of the ecosystem is that Go has built high-quality crypto support in rather than relying on the Heartbleed library instead...? That is certainly an interesting take.

0 comments

tasn7mo ago

Rust has rustls, we need to use OpenSSL for a very specific set of reasons unfortunately, but rustls is great and most people can just use that.

Also, I had no idea it was added because of constant time crypto that was shared after I wrote my top level comment.

9rxOP7mo ago

I'm not entirely clear here. Are you saying that the failure of the Go ecosystem was in not building on rusttls (which didn't exist at the time), or are you saying that the failure of the ecosystem was in you not stopping to think before writing your comment?