Conceded that technically OpenSSL is much better off than BIND ever was. When I was a lay-sysadmin many years ago, I ran BIND because what else was there? but

Conceded that technically OpenSSL is much better off than BIND ever was. When I was a lay-sysadmin many years ago, I ran BIND because what else was there? but always in the back of my head was the possibility that someone found Yet Another Hole in BIND. I'm not nearly as concerned about the implementation quality of OpenSSL today; it's been long enough it's probably okay (but at the wrong level of abstraction). But it historically had enough issues to show up on my warning radar as a lay sysadmin, and that meant that I never really trusted it afterward. Could be complete paranoia at this point.