alt Hacker NewsThen I'm wondering why they don't simply use the same crypto libraries as the web browsers.
Replies
dolmen • today at 9:13 AM
Go features cleaner crypto APIs (than OpenSSL for example) with less footguns.
OoooooooO • today at 9:08 AM
Preventing CGO overhead maybe?
Chromium uses BoringSSL, which opens its readme as follows:
> BoringSSL is a fork of OpenSSL that is designed to meet Google's needs.
> Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no guarantees of API or ABI stability.
OpenSSL itself is a clusterfuck that doesn't really meet anyone's needs: https://cryptography.io/en/latest/statements/state-of-openss...