Colin Percival personal blog

Tarsnap: No heartbleed here

There's a few reasons for this. First, the Tarsnap client-server protocol does not use TLS; instead, it uses a protocol which is about 100x simpler (in terms of the number of pages of documentation required to define it). This means there's less code and far fewer edge cases where bugs can lurk without being triggered…
Points
222
HN comments
53
Submissions
1
Cited by
0 commenters

Security & PrivacyInfrastructure & DevOps2014

On Hacker News

SubmittedTitle on HNPointsComments
Apr 9, 2014Tarsnap: No heartbleed here by cperciva22253

More from Colin Percival

All 60 posts →

Related posts from the same era