It seems like the common safe crypto expert suggestion of deferring to authority is a bit of a philosophical problem. Deferring to authority is how everyone got

It seems like the common safe crypto expert suggestion of deferring to authority is a bit of a philosophical problem. Deferring to authority is how everyone got into this SSL/TLS/openssl mess! I guess it's what you have to do to make sure less skilled/experienced developers do the least-stupid thing they might do when it comes to crypto, but on the other hand, to not be on an openssl-emergency treadmill for the past few years, there's no alternative to being a very sharp and independent developer who uses something niche but quite well made like polarssl, or finally decides to attack the openssl codebase like the openbsd developers have done (and since you suggest their work, you must have confidence that they won't fk it up.)