3 ms·
This is not a priority at all for the OpenBSD developers. Most of them are Canadian anyway, as I understand it.
by snazz 7y ago
This is not a priority at all for the OpenBSD developers. Most of them are Canadian anyway, as I understand it.
- zeveb 7y agoCanada actually respects FIPS 140-2 certification (and cooperates in certifying implementations!), so this would very much be relevant in a Canadian context.
- upofadown 7y agoThat is actually understating it. The libressl developers purged the code base of the FIPS stuff as part of a policy. From here: * https://marc.info/?l=openbsd-misc&m=139819485423701&w=2 https://marc.info/?l=openbsd-misc&m=139819485423701&w=2 "Note that FIPS mode isn't just worthless, it's actively harmful."
- compuguy 7y agoUnfortunately if you work with the US Government, there are situations where FIPS mode is required. This is why RHEL and CentOS still use OpenSSL...