While I disagreed with you on some PKI-related topics, I fully agree with you on that specific one. GnuTLS is bad.
(back reading that new triple handshake TLS attack)
2014-03-04 20:40 GMT+01:00 Howard Chu hyc@symas.com:
http://arstechnica.com/security/2014/03/critical-crypto-bug-leaves-linux- hundreds-of-apps-open-to-eavesdropping/
Perhaps folks will take us more seriously the next time we say "don't use GnuTLS" ... http://www.openldap.org/lists/openldap-devel/200802/ msg00072.html