> If OpenSSL has a hole in it, the fastest way to patch every system in the world is to patch the OpenSSL library. If every OpenSSL app in the world were static

> If OpenSSL has a hole in it, the fastest way to patch every system in the world is to patch the OpenSSL library. If every OpenSSL app in the world were statically compiled, then every single OpenSSL-using app in the world would need to be patched, tested, released, and upgraded, independently. Even if we upgrade a shared library and the reverse dependencies do not require a rebuild, we should still re-test everything (I think Debian does this already).