←back to thread

Microsoft Maintains Go Fork for FIPS 140-2 Support

(github.com)
43 points dschofie | 5 comments | 30 Apr 24 19:02 UTC | HN request time: 0.666s | source
Show context
metadat ◴[30 Apr 24 22:22 UTC] No.40217149[source]▶
There used to be the GO FIPS branch:

https://github.com/golang/go/tree/dev.boringcrypto/misc/bori...

But it looks dead for some time.

However https://github.com/golang-fips/go sprung up to take it's place.

I wonder why microsoft prefers to maintain it's own in entirety rather than share a piece of the burden.

replies(2): >>40217321 #>>40218936 #
1. gct ◴[01 May 24 02:36 UTC] No.40218936[source]▶
EEE
replies(3): >>40219488 #>>40224639 #>>40232874 #
2. metadat ◴[01 May 24 04:25 UTC] No.40219488[source]▶
What?
replies(1): >>40220748 #
3. camkego ◴[01 May 24 08:11 UTC] No.40220748[source]▶
From Wikipedia: https://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguis...

"Embrace, extend, and extinguish" (EEE),[1] also known as "embrace, extend, and exterminate",[2] is a phrase that the U.S. Department of Justice found[3] was used internally by Microsoft[4] to describe its strategy for entering product categories involving widely used open standards, extending those standards with proprietary capabilities, and using the differences to strongly disadvantage its competitors.

Please see the Wiki article for the full deal including footnotes.

4. cosmotic ◴[01 May 24 15:27 UTC] No.40224639[source]▶
It's not fair to say EEE in response to every apparently good thing Microsoft does.
5. bogantech ◴[02 May 24 05:06 UTC] No.40232874[source]▶
Ah yes they're going to extinguish Go with a checks notes... open-source fork