The KRACK embargo expired as per agreement but I'll partially concede after reading about this OpenSSL accident: https://www.tedunangst.com/flak/post/regarding-

The KRACK embargo expired as per agreement but I'll partially concede after reading about this OpenSSL accident: https://www.tedunangst.com/flak/post/regarding-embargoes https://www.tedunangst.com/flak/post/regarding-embargoes Google broke an embargo early. https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html https://security.googleblog.com/2018/01/todays-cpu-vulnerabi... EFail embargo was broken. See https://twitter.com/seecurity/status/995964977461776385 https://twitter.com/seecurity/status/995964977461776385 and http://flaked.sockpuppet.org/2018/05/16/a-unified-timeline.html http://flaked.sockpuppet.org/2018/05/16/a-unified-timeline.h... I don't think picking on OpenBSD is the right thing here.