> Avoid: the OpenSSL RNG Is that just historical - i.e. a tiny chance somebody is still using the broken Debian version from a decade ago - or is there actuall

> Avoid: the OpenSSL RNG Is that just historical - i.e. a tiny chance somebody is still using the broken Debian version from a decade ago - or is there actually something still insecure, or at least suspicious, even in 1.1.0+? I ask only because getentropy() is not widely available in the Linux world yet, and getrandom() - and direct use of the /dev files - do have some caveats of their own.