4 ms·

When the missing funding of OpenSSL was discussed, it came up several times, that OpenSSH, while doing great, is quite underfunded, too. I am glad to see them g

When the missing funding of OpenSSL was discussed, it came up several times, that OpenSSH, while doing great, is quite underfunded, too. I am glad to see them getting some money. What i can't really comment on myself, but am reading from the OpenBSD guys is, that the OpenSSL team does quite well with FIPS consulting and has no increased interest in improving the library.[0] Even if those claims are not true, it would be nice to see several other TLS libraries (GnuTLS, LibreSSL etc.) getting sponsored to get some healthy competition. Maybe, they could even directly compete for shares of the funding by the Linux Foundation in some way. [0]: http://www.openbsd.org/papers/bsdcan14-libressl/mgp00008.html http://www.openbsd.org/papers/bsdcan14-libressl/mgp00008.htm...

clarry 12y ago
Just in case someone missed it, here's video of the libressl talk to go with the linked slide(s). https://www.youtube.com/watch?v=GnBbhXBDmwU https://www.youtube.com/watch?v=GnBbhXBDmwU
awj 12y ago
Straight from the horse's mouth[1] > Also, the income they earn though their paid consulting work supports their unpaid work on OpenSSL, so by hiring OpenSSL team members you are not only solving your own problems but also helping to ensure the long term viability of the OpenSSL product. They also on their website list hourly consulting starting at $250/hour. Neither of these describe how much they get out of this, but it seems reasonable to say that the "OpenSSL runs of $2k/year" line is disingenuous at best. [1] http://www.openssl.org/support/consulting.html http://www.openssl.org/support/consulting.html
- rgbrenner 12y ago
  "but it seems reasonable to say that the "OpenSSL runs of $2k/year" line is disingenuous at best." Is it? The last contract listed on that page is 4 years old. Maybe they don't regularly get contracts.

clarry 12y ago

Just in case someone missed it, here's video of the libressl talk to go with the linked slide(s). https://www.youtube.com/watch?v=GnBbhXBDmwU https://www.youtube.com/watch?v=GnBbhXBDmwU

awj 12y ago

Straight from the horse's mouth[1] > Also, the income they earn though their paid consulting work supports their unpaid work on OpenSSL, so by hiring OpenSSL team members you are not only solving your own problems but also helping to ensure the long term viability of the OpenSSL product. They also on their website list hourly consulting starting at $250/hour. Neither of these describe how much they get out of this, but it seems reasonable to say that the "OpenSSL runs of $2k/year" line is disingenuous at best. [1] http://www.openssl.org/support/consulting.html http://www.openssl.org/support/consulting.html

rgbrenner 12y ago
"but it seems reasonable to say that the "OpenSSL runs of $2k/year" line is disingenuous at best." Is it? The last contract listed on that page is 4 years old. Maybe they don't regularly get contracts.