[zeromq-dev] Defaulting to tweetnacl?

Pieter Hintjens ph at imatix.com
Wed Mar 2 09:37:50 CET 2016


Sounds good. Would you like to add a section on secure builds on the
wiki? We can point people to this from the download page.

On Wed, Mar 2, 2016 at 9:03 AM, frank <soundart at gmx.net> wrote:
>
>
> On 03/01/2016 09:34 PM, Jim Garlick wrote:
>
> ...
>> It at least seems wrong to have libzmq silently use builtin tweetnacl
>> if libsodium is not found, as that might lead to people not getting
>> the robust build they intended. Jim
>
> Hi,
>
> For me this is the most important part. In the doc should be
>
> - an overview of the crypto options available
> - a mentioning of the tweetnacl default being used
>   - btw I think no auto detection and no auto-usage of libsodium was
> discussed. libsodium has to be activated by an explict switch like
> "--with-libsodium="
> - and a recommendation for binary distributions to use libsodium,
> because of the easier security updates for them
>
> In order to avoid surprises and get a "robust build"
>
> kind regards
>   Frank
>
>
>
> _______________________________________________
> zeromq-dev mailing list
> zeromq-dev at lists.zeromq.org
> http://lists.zeromq.org/mailman/listinfo/zeromq-dev



More information about the zeromq-dev mailing list