3 ms·
> Anthony Basile, who is the current lead for LibreSSL on Gentoo, agreed, saying that LibreSSL is "more of a hassle than it's worth". This (as the article poin
by ed25519FUUU 6y ago
> Anthony Basile, who is the current lead for LibreSSL on Gentoo, agreed, saying that LibreSSL is "more of a hassle than it's worth".
This (as the article points out), may be true now but was definitely NOT true back when heartbleed was announced.
I understand that they've cleaned up the OpenSSL codebase significantly. I wish it could have happened without the threat of an alternative implementation, but maybe adversarial environment is just part of how open-source software gets better?
- detaro 6y agoBit hard to say that it couldn't have happened without the fork, given we don't have an alternate timeline to go back to and try. It would have gotten more attention and support without the fork too following Heartbleed.
- kevin_thibedeau 6y ago"cleaned up" still means an endless series of WTFs and gaping holes in the documentation. Session ticket caching is broken out of the box and you still have to implement a callback with arcane details.