4 ms·

I am surprised by the lack of corporate sponsors [1]. 1. https://www.openssl.org/support/acks.html https://www.openssl.org/support/acks.html

kelnos 5y ago
I'm not, sadly. It's pretty standard in our industry that companies will use a ton of open source software without giving back at all, or giving back many orders of magnitude less than they get.
- kingforaday 5y ago
  It may be an awareness problem too. I know personally I've enjoyed having OpenSSL around and just became a GitHub sponsor (under same HN username).
- Teknoman117 5y ago
  Reminds me of a tweet I saw: "the most consequential figures in the tech world are half guys like Steve Jobs and Bill Gates, and the other half are some guy named Ronald who maintains a tool called 'RUNK' which stands for 'Ronald's Universal Number Kounter' and handles math for every machine on Earth"
  - no_time 5y ago
    Real life example of this is probably something like zlib[0]. Easily on billions of devices. https://zlib.net/ https://zlib.net/
gtirloni 5y ago
https://www.openssl.org/community/thanks.html https://www.openssl.org/community/thanks.html "The following organizations who contribute staff time to work on the project (alphabetically): Akamai, Cryptsoft, Google, Oracle, Red Hat, Siemens, and Softing."
- MR4D 5y ago
  Uncredited is the NSA. /s
andrewstuart2 5y ago
Another thing to consider here is that many times, larger corporations are required to comply (or internally have hangups about not complying) with FIPS. And at least as far as I can tell, there are only a few older versions of OpenSSL compatible with a legacy FIPS module. Honestly I have given up on the politics of it so I may be incorrect, but I know the few times I've brought it up at (soon to be former) employer, that has come up.
IncRnd 5y ago
OpenSSL sells support contracts ranging from $15,000 to $50,000. [1] [1] https://www.openssl.org/support/contracts.html https://www.openssl.org/support/contracts.html
j_walter 5y ago
Rarely does the NSA get added to the list of corporate sponsors though...
fsckboy 5y ago
> I am surprised by the lack of corporate sponsors you energized me to look into donating, turns out the OpenSSL Software Foundation is a Delaware non-profit, but not a US 501c3, so not tax deductible at the federal level. https://www.openssl.org/support/donations.html https://www.openssl.org/support/donations.html

kelnos 5y ago

I'm not, sadly. It's pretty standard in our industry that companies will use a ton of open source software without giving back at all, or giving back many orders of magnitude less than they get.

kingforaday 5y ago
It may be an awareness problem too. I know personally I've enjoyed having OpenSSL around and just became a GitHub sponsor (under same HN username).
Teknoman117 5y ago
Reminds me of a tweet I saw: "the most consequential figures in the tech world are half guys like Steve Jobs and Bill Gates, and the other half are some guy named Ronald who maintains a tool called 'RUNK' which stands for 'Ronald's Universal Number Kounter' and handles math for every machine on Earth"
- no_time 5y ago
  Real life example of this is probably something like zlib[0]. Easily on billions of devices. https://zlib.net/ https://zlib.net/

gtirloni 5y ago

https://www.openssl.org/community/thanks.html https://www.openssl.org/community/thanks.html "The following organizations who contribute staff time to work on the project (alphabetically): Akamai, Cryptsoft, Google, Oracle, Red Hat, Siemens, and Softing."

MR4D 5y ago
Uncredited is the NSA. /s

andrewstuart2 5y ago

Another thing to consider here is that many times, larger corporations are required to comply (or internally have hangups about not complying) with FIPS. And at least as far as I can tell, there are only a few older versions of OpenSSL compatible with a legacy FIPS module. Honestly I have given up on the politics of it so I may be incorrect, but I know the few times I've brought it up at (soon to be former) employer, that has come up.

IncRnd 5y ago

OpenSSL sells support contracts ranging from $15,000 to $50,000. [1] [1] https://www.openssl.org/support/contracts.html https://www.openssl.org/support/contracts.html

j_walter 5y ago

Rarely does the NSA get added to the list of corporate sponsors though...

fsckboy 5y ago

> I am surprised by the lack of corporate sponsors you energized me to look into donating, turns out the OpenSSL Software Foundation is a Delaware non-profit, but not a US 501c3, so not tax deductible at the federal level. https://www.openssl.org/support/donations.html https://www.openssl.org/support/donations.html