Hacker News new | past | comments | ask | show | jobs | submit login

Who knows that google was using OpenSSL?



The security of a system should never rely on an attacker not knowing the details of the algorithm or implementation.

https://en.wikipedia.org/wiki/Security_through_obscurity


It is possible to fingerprint a TLS stack using its behaviour that a sysadmin can't change. People knew it was openssl.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: