# How adopted is the BYFE concept?

**URL:** https://openziti.discourse.group/t/how-adopted-is-the-byfe-concept/1462
**Category:** Building/Development
**Created:** [August 9, 2023, 6:25pm UTC](https://openziti.discourse.group/t/how-adopted-is-the-byfe-concept/1462 "2023-08-09T18:25:41Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![tomc](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/tomc/32/977_2.png) [@tomc](https://openziti.discourse.group/u/tomc)
#### Post date: [August 9, 2023, 6:25pm UTC](https://openziti.discourse.group/t/how-adopted-is-the-byfe-concept/1462/1 "2023-08-09T18:25:41Z")

</div>

How widespread in ziti is the adoption of the [Bring Your Favorite Engine (BYFE)](https://github.com/openziti/tlsuv/blob/11f929955aa168b2395c74f184915877188db0ca/README.md?plain=1#L23) concept?

I quick review of the go components suggest that it maybe targeted strictly to the clients.

~ Tom

---

<div class="post-metadata">

### Author: ![plorenz](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/plorenz/32/54_2.png) [@plorenz](https://openziti.discourse.group/u/plorenz)
#### Post date: [August 9, 2023, 6:48pm UTC](https://openziti.discourse.group/t/how-adopted-is-the-byfe-concept/1462/2 "2023-08-09T18:48:19Z")

</div>

The Go components are generally built to be pluggable, so someone could provide a link implementation or an edge listener which used a different TLS provider than the default. However, no one has done that so far. Our next work in this area will likely be in trying to provide DTLS implementations rather than different implementations of TLS.

Hope that’s helpful,  
Paul

---

<div class="post-metadata">

### Author: ![PhilipGriffiths](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/philipgriffiths/32/341_2.png) [@PhilipGriffiths](https://openziti.discourse.group/u/PhilipGriffiths)
#### Post date: [August 9, 2023, 7:01pm UTC](https://openziti.discourse.group/t/how-adopted-is-the-byfe-concept/1462/3 "2023-08-09T19:01:52Z")

</div>

Would this post not be an implementation of BYFE - [FIPS Compliance - #3 by ccravens](https://openziti.discourse.group/t/fips-compliance/872/3)?? I know several users of OpenZiti which have implemented FIPs compliant versions of Ziti which I assumed used BYFE…

---

<div class="post-metadata">

### Author: ![tomc](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/tomc/32/977_2.png) [@tomc](https://openziti.discourse.group/u/tomc)
#### Post date: [August 9, 2023, 7:16pm UTC](https://openziti.discourse.group/t/how-adopted-is-the-byfe-concept/1462/4 "2023-08-09T19:16:28Z")

</div>

It seems if a package links against tlsuv, you get BYFE; otherwise, it is whatever the default is.

Go is an interesting case study as third-party dependencies, such as Resty, bring in TLS.

~ Tom

---

<div class="post-metadata">

### Author: ![tomc](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/tomc/32/977_2.png) [@tomc](https://openziti.discourse.group/u/tomc)
#### Post date: [August 9, 2023, 7:28pm UTC](https://openziti.discourse.group/t/how-adopted-is-the-byfe-concept/1462/5 "2023-08-09T19:28:00Z")

</div>

Since the dependency is deep, maybe the better option is [GitHub - golang/go at dev.boringcrypto](https://github.com/golang/go/tree/dev.boringcrypto), which maps crypto/\* to boringssl.

---

<div class="post-metadata">

### Author: ![plorenz](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/plorenz/32/54_2.png) [@plorenz](https://openziti.discourse.group/u/plorenz)
#### Post date: [August 9, 2023, 7:34pm UTC](https://openziti.discourse.group/t/how-adopted-is-the-byfe-concept/1462/6 "2023-08-09T19:34:57Z")

</div>

Seems like a good option to investigate 👍
