Furthermore, those applications probably account for the majority of SSL connections established on most people's machines, and the largest number of different servers connected to. So the actual networking code is probably just as robust as OpenSSL.
The main issue is whether the API it provides makes it as easy to integrate into applications as the OpenSSL API does.
Posted Feb 17, 2011 15:54 UTC (Thu) by lkundrak (subscriber, #43452)
[Link]
Well, there is nss_compat_ossl library which implements a subset of openssl API on top of NSS. For most software it takes very little effort to carry them over from openssl, just to be on the safe side.