SecTransport and Security.framework are not suitable replacement targets. wtc@ and I went back when OS X 10.7 was introduced to annotate deprecations, but alas, email retention & codereviews are failing me.
To be concrete as to why I'm WontFixing:
- There is no plan to move off the CDSA/CSSM interfaces we're presently using, because there is no suitable alternative from Security.framework
- Apple is aware of this plan (at the engineering and management level)
- Apple has no plans to introduce suitable alternatives for a number of functional pieces of what we're using
- The overall migration off deprecated APIs is possible if/when we move certificate verification from depending on OS X's APIs to our own verification library. That work is ongoing for Linux/ChromeOS, but no firm product direction for OS X (there are security and usability implications, unsurprisingly) have been set - we're focusing on the known/knowns first.
Comment 1 by rsleevi@chromium.org
, Mar 1 2016