4 ms·
> OpenSSL developers appear to want to focus on developing new features rather than cleaning up the mess of regressions they have created with OpenSSL 3. There
by rdcldrmr 5y ago
> OpenSSL developers appear to want to focus on developing new features rather than cleaning up the mess of regressions they have created with OpenSSL 3.
There is so much truth contained in this one line... and it's been that way with every OpenSSL release.
Being funded by Red Hat comes with a price that users sometimes end up paying. LibreSSL has zero corporate involvement but remains in very active development, with arguably much better coding practices and a very consistent release schedule that follows OpenBSD. You won't find every new or obscure feature rushed into the codebase, but (perhaps as a result of that) I have a lot more confidence in it personally.
Most of the compatibility issues they had with LibreSSL before have been solved with the integration of the OpenSSL 1.1 API, which is in the newest stable version.
- deleted 5y ago[deleted]
- bonzini 5y ago> Being funded by Red Hat What funding are you referring to?
- CameronNemo 5y agoI am not sure what they mean by that, but I looked into it and found their acknowledgements page: https://www.openssl.org/support/acks.html https://www.openssl.org/support/acks.html Which links to a "thanks" page: https://www.openssl.org/community/thanks.html https://www.openssl.org/community/thanks.html which says the following: We'd like to thank the following individuals and organizations who contribute to the OpenSSL project. [...] The following organizations who contribute staff time to work on the project (alphabetically): Akamai, Cryptsoft, Google, Oracle, Red Hat, Siemens, and Softing.