TLS Support

[Dominic Steinitz]

I don’t often venture an opinion here but I would be very much *against* using OpenSSL given the number of vulnerabilities it continues to experience. There’s http://www.mitls.org/wsgi/home which has been formally verified and our own https://hackage.haskell.org/package/tls.

Dominic Steinitz
dominic at steinitz.org
http://idontgetoutmuch.wordpress.com

On 25 Mar 2015, at 09:08, libraries-request at haskell.org wrote:

> Also, to this day we don't have any TLS library support in the platform,
> which also is subject to debate of which crypto-library to use (and
> there's also the question whether to use OpenSSL via FFI or a native TLS
> reimpl). So the platform-included `HTTP` package is not even able to
> access `https://` URLs which is quite sad, as this also holds back
> `cabal-install`'s ability to access `https://`-only repositories.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.haskell.org/pipermail/libraries/attachments/20150325/9c2f3bcd/attachment.html>