> "FIPS mode” is a thing provided by OpenSSL that, well, makes it more secure Well, it makes it more compliant. In some ways it can make it less secure. For ex

> "FIPS mode” is a thing provided by OpenSSL that, well, makes it more secure Well, it makes it more compliant. In some ways it can make it less secure. For example, you can't use the newer algorithms (which becomes more important the longer it's been since the latest FIPS standard was released). And if you need to be FIPS certified, you have to wait for security patches to go through a lengthy review process.