Technical projects about ayo HOT 4 OPEN

core http2

Just so you know, this fork currently includes Node’s experimental HTTP2 implementation, and I don’t see it being removed here.

from ayo.

@addaleax great, I missed that one!

from ayo.

I'd like to suggest some security things:

• replacing the weird bundled fork of openssl with dynamically linked (system) libtls/libcrypto;
• examining random number generation code – it probably still uses the openssl RNG which should not be used anywhere ever – if so, replacing it with what libsodium does

from ayo.

@myfreeweb yeah, those were definitely thing that were brought up in Node.js and that might make sense but also require a ton of volunteer work. nodejs/node#13575 is probably a really great start, though

from ayo.