good tls more privacy<p>&gt; i dont believe u<p>theres a open buffer overflow in the github repo supplementaluserdata for 1 year<p>logjam. heartbleed. automatic downgraded encryption for non-US (or foreign proxies and TOR). + one or two other show stopping bugs (and n00b crypto bugs) previously like null nonce&#x2F;re-using nonce<p>shit the author of TLS even published a MITM exploit kit&#x2F;template<p>oh and they want us to run TLS now for all SSH and SSL&#x2F;HTTPS?<p>gentlemen this is government crypto.<p>even the head of W3C published an article saying this is not https. its only being labeled https. [what is the definition of subversion?]<p>IMHO: whats needed is two choices for HTTPS. and seperate crypto for SSH. also if they would freeze TLS for at least 3-6 months it could give Language&#x2F;Library authors time to audit there code (and prove tls is not so buggy it needs a new version every week)