<div>On Tue, Aug 23, 2011 at 8:23 AM, Mike Perry <span dir="ltr"><<a href="mailto:mikeperry@fscked.org">mikeperry@fscked.org</a>></span> wrote:</div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">
<br>
</div><div class="im"><snip></div><div class="im">
<br>
</div>SSL certificates are not isolated. They might never be. The SSL stack<br>
is a nightmare.<br>
<div><div></div><div class="h5"><br></div></div></blockquote><div> </div><div>Mike, can you provide some specifics on how the SSL stack is a nightmare? I am working on development of an open source C-based libevent2-based stand-alone SSL MiTM proxy but have not yet hit any of the ugly stuff. Pointers to information would also be appreciated.</div>
<div><br></div>-- Julie C.<br><div><a href="mailto:julie@h-ck.ca" target="_blank">julie@h-ck.ca</a><br></div><div>GPG key FF4E2E70 available at <a href="http://keys.gnupg.net/" target="_blank">http://keys.gnupg.net</a> </div>
</div>