Rentzsch’s OpenSSL Tech Note
Ideally the OpenSSL project would do a better job at API compatibility, but it’s really not in their unixy source-code-oriented worldview. Sure we could get big into the project to try to improve it, but we’d rather put the resources into making OS X rock harder.
Both SecTransform and lowly CommonCrypto offer API compatibility, allowing us to add functionality and fix security problems even in shipping apps, which is awesome for users.
OpenSSL is kind of a mess. SecTransform looks pretty nice. It’s becoming tempting to require Lion.
