4 ms·

I'd encourage folks to read the recently-published statement [1] about the state of OpenSSL from Python's cryptography project. [1]: https://news.ycombinator.c

by ofek 8mo ago

I'd encourage folks to read the recently-published statement [1] about the state of OpenSSL from Python's cryptography project. [1]: https://news.ycombinator.com/item?id=46624352 https://news.ycombinator.com/item?id=46624352

tptacek 8mo ago
We're recording a Security Cryptography & Whatever with them in an hour or so, if anyone's got questions they want us asking Alex and Paul. True facts: Paul co-created Frinkiac.
snvzz 8mo ago
Instead of everybody switching to LibreSSL, we had the Linux Foundation reward OpenSSL's incompetence with funding. We are still suffering from that mistake, and LibreSSL is well-maintained and easier to migrate to than it ever was. What the hell are we waiting for? Is nobody at Debian, Fedora or Ubuntu able to step forward and set the direction?
- seg_lol 8mo ago
  How about standardizing on an API, then switching backends can be up to the administrator of the machine.
  - snvzz 8mo ago
    LibreSSL has put serious effort into making itself interchangeable with openssl. OpenSSL as the incumbent has no incentive to do the same.