Didn't they say it already? They basically think that the OpenSSL API is convoluted. That's my understanding of the comment above, at least.

▲

timschmidt an hour ago | parent [-]

Unnecessarily complicated APIs are a security code smell precisely because they help hide bugs, leaky abstractions, insecure state, and other exploitable issues.

▲

palata 30 minutes ago | parent [-]

Did I say they weren't? Not sure why I'm being downvoted here.

	▲	timschmidt 10 minutes ago \| parent [-]
		Op did immediately above you i.e.: "nothing to do with malice or exploitability" and when asked to explain you responded with: "Didn't they say it already?" Which any reader can verify they have not at the time of 1:42pm EST Oct 23 2026.