No, I do not think Java's crypto library is as well regarded as Golang's. For ex... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

tptacek on May 7, 2015 | parent | context | favorite | on: Go crypto: bridging the performance gap

No, I do not think Java's crypto library is as well regarded as Golang's. For example, didn't Java SSL recently manage to reincarnate the Bleichenbacher padding oracle?

tedunangst on May 7, 2015 [–]

And the message skipping vuln, which put basically all TLS clients in the "no security" category.

wolf550e on May 7, 2015 | [–]

For those wondering: https://www.smacktls.com/#skip

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact