3 ms·
It certainly wasn't when I was Security Officer -- it didn't exist yet. I believe some people are working on bringing libressl into the FreeBSD base system, bu
by cperciva 10y ago
It certainly wasn't when I was Security Officer -- it didn't exist yet.
I believe some people are working on bringing libressl into the FreeBSD base system, but there are some challenges; for example, FreeBSD supports stable branches for 5 years, while libressl follows OpenBSD's "break everything once a year" model.
- tedunangst 10y agoCould be biased, but I think we're more careful about bundling breaking changes in security patches though.
- cperciva 10y agoIf you try at all, then you're trying harder than OpenSSL. But that doesn't necessarily help if there has been so much code churn over the past 5 years that we can't figure out how or if we should apply the security patch.