26 ms·
> it hasn’t improved markedly since libreSSL began either That's not really true. Pre-heartbleed there were very few contributors to OpenSSL. After heartbleed
by psanford 6y ago
> it hasn’t improved markedly since libreSSL began either
That's not really true. Pre-heartbleed there were very few contributors to OpenSSL. After heartbleed the management of the project was overhauled. There was also a large inflow of funding (Linux Foundation’s Core Infrastructure Initiative) and new contributors.[0]
In 2018 the OpenSSL team was one of the winners of the Levchin prize "for dramatic improvements to the code quality of OpenSSL".
[0]: https://www.securityweek.com/evolution-openssl-security-after-heartbleed https://www.securityweek.com/evolution-openssl-security-afte...