https://issues.dlang.org/show_bug.cgi?id=17958

--- Comment #3 from Andre <an...@s-e-a-p.de> ---
(In reply to Seb from comment #2)
> Hmm, not sure if this wouldn't be a huge effort for Phobos + given that
> crypto needs to be able to be patched within hours, I'm inclined to make
> this a WONTFIX too.
> 
> The best library solution I know is this
> https://github.com/LightBender/SecureD

If in Phobos crypto functionality isn't directly implemented but a nice wrapper
is available around operation system crypto libraries (on windows SChannel) /
OpenSSL /... then neither Phobos needs to be patched nor the application
developer needs to ship a new version of his application.

The crypto fix will be provided by the operation system (windows update in case
of windows...)
(Delphi is using this approach)

What I suggest is a crypto interface in Phobos with implementations for
SChannel / OpenSSL / ...

--

Reply via email to