Advanced Users can post their questions and comments here for the not so Newbie crowd.

Moderator: eriksl

User avatar
By davydnorris
#85006 I would say it's as safe/unsafe as any other implementation - the protocol is standard, mbedtls is public and so well scrutinised for holes, and if you choose a good cypher suite, at least 2048 bit keys, SHA256 or better signatures, TLS 1.2+, and avoid known issues (like SSL3 which they recently re-enabled in the code and I promptly disabled again) you are as safe as anybody else.