Advanced

GnuTLS: Big internal bugs, few real-world problems

Posted by Ridcully on · 2 comments
ZDNet | Linux And Open Source Blog RSS; By Steven J. Vaughan-Nichols 		Mail this story
Print this story

Yes, GnuTLS has major security holes. So what? Almost no one uses it in ways where it could be vulnerable to fraud.

Full Story

  Nav
» Read more about: Story Type: News Story, Security; Groups: Community, GNU, Linux

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (2)

gus3 ·
If GNU wants to be considered for heavy-lifting, mission-critical projects, they need capable, dedicated eyes on the critical code. TLS can't be someone's hobby.

As it stands right now, I can't even go to the GNU TLS website to find out if/when the code was last audited. Netcraft reports empty HTTP responses. Does anyone know what's going on?
AwesomeTux ·
@gus3 "its maintainer disassociated it from GNU in December 2012 after disputes with the Free Software Foundation over certain policies" http://en.wikipedia.org/wiki/GnuTLS http://lwn.net/Articles/529558/

These "disputes" and "major disagreement" may very well be related to the GNU Project's (over-)involvement in GnuTLS's development. In other words, GNU did/do have dedicated eyes on critical code and GnuTLS's developers didn't like that.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post