Episode 348 - OpenSSL is the new lead paint

Josh and Kurt talk about the recent OpenSSL nothingburger. OpenSSL got everyone whipped into a frenzy over a critical vulnerability, then changed the severity to high. The correct solution to this whole problem is to stop using a TLS library written in C, we need to be using memory safe languages. Don't migrate from OpenSSL 1 to 3, migrate from OpenSSL 1 to Rustls.

• OpenSSL Blog Post
• OpenSSL pre-announcement
• Mark Cox Tweet 3.0 only affected
• GossiTheDog NDA Tweet
• Claims of a name and logo
• Rustls

Image Credit