3 ms·
Now that is not a very engineering-wise useful behavior. You may feel bad (I mean OpenSSL not "you") but do you want a better Internet or not? It is as easy as
by pfortuny 12y ago
Now that is not a very engineering-wise useful behavior. You may feel bad (I mean OpenSSL not "you") but do you want a better Internet or not?
It is as easy as an encrypted email.
- acqq 12y agoPut yourself in OpenSSL shoes. Would you then really send your still confidential bugs to the people who claimed you're incompetent but they themselves didn't remove the said bugs after promoting their work and speaking bad about you for months? Even if you would, can you know if they would not leak them before your correspondents (which include really big companies which can really be in danger if the leak occurs) are ready? (See fafner's comment here for some details -- apparently LibreSSL people didn't want to guarantee not to leak(!)) You just know they are antagonistic to you.
- sigzero 12y agoNo, they have different goals and different standards. I think people are attributing "antagonistic" when it really isn't there or is not nearly at the level the general geekdom thinks it is. Theo doesn't believe in embargoes. Theo doesn't want to be a part of yet another list when he is already swamped with the task load he has. I see zero problem with that. That the OpenSSL and LibreSSL teams talk is readily apparent though.