4 ms·
It is a combination of "many eyes" and "good documentation". What is needed is some good text that describes the design choice, the rationale, and all the trick
by pornin 10y ago
It is a combination of "many eyes" and "good documentation". What is needed is some good text that describes the design choice, the rationale, and all the tricky details; and then people who read it and think about it. I'll write and publish such text within the next few months.
- xdej 10y agoYou could use some of your 233,693 reputation points as bounties on security.SE to attract people to read and think about bearssl.
- rdeboo 10y agoSo I guess it is going to take years. Generally, open source software benefits from more users. But having a huge amount of users makes it more difficult to improve and cleanup because you can't just deprecate stuff easily. (like SSL2/3). Also, having 100% of the internet using openssl makes the impact of a vulnerability in that library huge. Some diversity is probably a good thing. I appreciate the time and effort that you are putting into it, good luck.
- baby 10y agoany RSS feed to be able to catch that?