Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Go has its own SSL library, crypto/tls, which is not linked to any C libraries and wasn't affected by Heartbleed 1.0. You haven't written much Go if you don't know that.

The parent poster obviously wasn't saying that crypto/tls was affected by Heartbleed specifically. It was a statement about the security implications of static linking.





Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: