5 ms·
But libressl breaks ABI compatibility (see that BSD is taking a step backward). OpenSSL is affected by what we can call "fame". It's the mostly wide used secur
by IloveHN84 8y ago
But libressl breaks ABI compatibility (see that BSD is taking a step backward).
OpenSSL is affected by what we can call "fame". It's the mostly wide used security library in the whole internet and it's the favourite target for hackers. For comparison, it's the same that happens to OS: windows and android are the preferred target platforms because of the large user base they have.
- gray_-_wolf 8y ago> see that BSD is taking a step backward what do you mean?
- blattimwind 8y ago> OpenSSL is affected by what we can call "fame". OpenSSL is also affected by the problem that it was basically a toy project in the first couple years and got very little attention for well over a decade. OpenSSL is currently where Windows was ~15 years ago: XP and previous releases were an unmitigated security disaster, and slowly, release-for-release things are now improving. OpenSSL also suffers from typical industry diseases: Very poor documentation, poor interface design.
- myst 8y ago> But libressl breaks ABI compatibility Who cares? Compatibility with insecurity is not a goal.
- acdha 8y agoAre you volunteering to patch every program which uses OpenSSL? If not, you have the answer: it’s been widespread for decades and so many things use it that compatibility is a big concern. Think about a distribution like Debian with thousands of packages, some of which update frequently and others which haven’t been updated in years. If it’s compatible, you can ship one shared library update but if it’s not you’re either not upgrading or maintaining a ton of patches.
- icebraining 8y agoDebian is a bad example; they compile everything from scratch, they don't need ABI compatibility.