TLS Support

Dominic Steinitz dominic at
Wed Mar 25 09:39:41 UTC 2015

I don’t often venture an opinion here but I would be very much *against* using OpenSSL given the number of vulnerabilities it continues to experience. There’s which has been formally verified and our own

Dominic Steinitz
dominic at

On 25 Mar 2015, at 09:08, libraries-request at wrote:

> Also, to this day we don't have any TLS library support in the platform,
> which also is subject to debate of which crypto-library to use (and
> there's also the question whether to use OpenSSL via FFI or a native TLS
> reimpl). So the platform-included `HTTP` package is not even able to
> access `https://` URLs which is quite sad, as this also holds back
> `cabal-install`'s ability to access `https://`-only repositories.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the Libraries mailing list