3 ms·
Kudos on a list where features HardenedBSD doesn't have but others (OpenBSD) do are also listed. Recently I've become accustomed to seeing overly tuned feature
by Ensorceled 8y ago
Kudos on a list where features HardenedBSD doesn't have but others (OpenBSD) do are also listed.
Recently I've become accustomed to seeing overly tuned feature lists where the product in question has, apparently, all the things you could want.
- craftyguy 8y agoWell, this does have an overwhelming number of 'the things you could want'. This serves the same purpose, while attempting to appear more credible by showing a tiny handful of shortcomings in an attempt to convince the reader that you can trust them.
- Ensorceled 8y agoWhat other shortcomings are missing from the list?
- craftyguy 8y agoRegular code reviews like what the OpenBSD folks do. Also, they appear to be back on OpenSSL again[0], and not using LibreSSL like the list claims. If they can't even accurately reflect which SSL library they are using, what else on the list is incorrect? 0. https://hardenedbsd.org/article/shawn-webb/2018-04-30/hardenedbsd-switching-back-openssl https://hardenedbsd.org/article/shawn-webb/2018-04-30/harden...
- lattera 8y agoHardenedBSD still uses LibreSSL in base. The switch back to OpenSSL will be on 01 July 2018, as mentioned in the article you linked to.
- Ensorceled 8y agoRegular code reviews are a process, not a feature and switching back to OpenSSL is a future change. Any actual features that support your cynicism?