I would add to Arno words that one has to look at the size of OpenSSL source code. It is huge ! I don't see any reason to rewrite it given it is open source and recognized as a high quality software. But maybe you see something I missed...
-- [EMAIL PROTECTED] The author of the freeware multi-tier middleware MidWare The author of the freeware Internet Component Suite (ICS) http://www.overbyte.be ----- Original Message ----- From: "Arno Garrels" <[EMAIL PROTECTED]> To: "ICS support mailing" <twsocket@elists.org> Sent: Thursday, September 11, 2008 11:52 AM Subject: Re: [twsocket] Poor man's SSL/TLS? >> that encourage people to use the OpenSSL library. I hope >> those who worked on ICS-SSL could shed some light... > > Beside the huge effort it would take to implement the SSL > from scratch, do you realy believe that any home-grown > solution, written by non-experts in cryptography could be > more secure than an open source library that is standard in > unix world, with contributers like IBM etc.? > > -- > Arno Garrels [TeamICS] > http://www.overbyte.be/eng/overbyte/teamics.html > > > jlist wrote: >> I was reading TLS's wikipedia page the other day. I find >> that although it's a lot of work, it is probably not >> too bad to write the SSL handshake and encryption from >> scratch, say, with ICS. I must be seriously overlooking >> the details and complexities. I wonder what are the potential >> issues of taking this approach and what is the main reasons >> that encourage people to use the OpenSSL library. I hope >> those who worked on ICS-SSL could shed some light... >> >> -- >> Jack > -- > To unsubscribe or change your settings for TWSocket mailing list > please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket > Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
