Hacker News Reader

This line is a bit concerning to me: "and libtls-bearssl, an alternative implementation of libtls based on BearSSL" It sounds like a custom rolled variant of a low-adoption SSL lib that isn't itself very well tested.. It may be better.. it may be horribly flawed or backdoored in a non-obvious way. But I also get how horrible OpenSSL is..

View on HN

same here, in fact the last bearssl release was 4 years ago, very inactive if still alive.

mbedtls might be better here, but it does not have tls1.3 fully ready(I don't think bearssl has 1.3 either).

wolfssl could be the best, small and robust with new features, it is dual licensed if you want to use it in commercial releases.

Reply on news.ycombinator.com