Colm MacCárthaigh comments

Results 12 comments of


                                            Colm MacCárthaigh

Reduce memory usage of s2n_connection

I'd love if we could split the memory we need during negotiation from the memory we need during a connection ... but especially in a way that could avoid dynamic...

s2n write APIs do not return the number of actually copied bytes, and thereby allow for Stream corruption

If the fix is an API change, would this need to be an "s2n_sendv2"? or some other new name, to maintain back compat

Way to radically improve security of sudo: make a daemon instead of setuid binary!

I love this proposal because it makes me think about a possibility I hadn't considered before. But just some quick first impressions: The proposal is reminiscent of microkernel architecture; the...

Add s2n Client Integration Test with Top N Domains

I love this item. We also have an Amazon Web Service for this ... https://aws.amazon.com/alexa-top-sites/

Stuffer Debug Option to print bytes Read/Written by s2n

Wow, annotating via the stuffer is an *incredibly* good idea. It makes me excited to write say a TCP/IP parser using the stuffer. It would be so much easier to...

Why do (some) unexpected messages cause neither an alert to be sent, nor flushing of the connection?

I'm pretty sure that this isn't intentional! It's definitely worth doing the wiping. I'm less sure about sending the alert; even though the standard does say that sending alerts is...

Why do (some) unexpected messages cause neither an alert to be sent, nor flushing of the connection?

Oh we'd definitely welcome Pull Requests and always try to be productive and avoid rabbit holes. I completely agree about honoring standards in general, but TLS can sometimes be a...