There were some issues with the included TLS implementation [0][1] and I have heard that it also does not give you control over the toolchain which IMO is a huge issue. I have read here somewhere that because it is not open source only the paid version supports all the TLS features and the non free versions are insecure by default. (which makes me wonder about default device security if a license expires).<p>[0] https:&#x2F;&#x2F;cve.mitre.org&#x2F;cgi-bin&#x2F;cvename.cgi?name=CVE-2015-8036<p>[1] https:&#x2F;&#x2F;cve.mitre.org&#x2F;cgi-bin&#x2F;cvename.cgi?name=CVE-2015-5291
Ask HN: Any opinions on ARM mbed security?