But isn't spiped mostly irrelevant here? I mean, it's not a TLS replacement, as ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

drdaeman on April 7, 2014 | parent | context | favorite | on: OpenSSL Security Advisory: TLS heartbeat read over...

But isn't spiped mostly irrelevant here?

I mean, it's not a TLS replacement, as it's based on PSK (thus only useable between two mutually trusting peers like me and myself), not PKI.

cperciva on April 7, 2014 [–]

spiped should be irrelevant here. But there are a lot of people using PKI where they could be using PSK.

otterley on April 8, 2014 | [–]

Who, exactly? Distributing shared secrets securely is a non-trivial exercise.

tripzilch on April 8, 2014 | | [–]

You mean like wifi-passwords? :) Everybody seems to manage distributing those just fine?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact