3 ms·
I'm not sure the "community as a whole was happy" about trusting such critical features to OpenSSL. Were there any other FLOSS solutions that did everything Ope
by tomphoolery 13y ago
I'm not sure the "community as a whole was happy" about trusting such critical features to OpenSSL. Were there any other FLOSS solutions that did everything OpenSSL does when a lot of this stuff was developed?
- cynicalkane 13y agoRevealed preferences. People complained about OpenSSL, but in practice were far more concerned with the latest Java ORM or NoSQL database.
- lmm 13y agoThe revealed preference is that the industry doesn't really care about security. We follow "industry best practice" - that is, we do the minimum to stop users complaining - but users don't buy based on security, and so it's not worth putting marginal effort into.