Get rid of cgo and dated libsodium-go wrapper #634
martyanov
started this conversation in
Feature requests
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
It was probably covered by security review, but libsodium-go is dated and its README explicitly states that
This code requires an independent audit check!
.Also,
cgo
is quite different runtime fromgc
and may be a problem to maintain, build, debug and base your project on.I understand that the amount of work to be done may be huge. One option is to isolate
cgo
withlibsodium
into a separate service and provide RPC, just to limitcgo
surface.Just my 2 cents.
Beta Was this translation helpful? Give feedback.
All reactions