Rich Salz to OpenSSL: Please change your mind | Hacker News Reader

Rich Salz to OpenSSL: Please change your mind

mta.openssl.org

85 pointsdogecoinbase23 comments

Regarding Rich Salz’s closing remark “No matter how far down the wrong road you've gone, turn back.", I, for one, have seen this remark made before elsewhere.

it was in Tomas Mraz’s email signature. Mr. Mraz is working as a contractor for OpenSSL Project. His stint was working for Red Hat Enterprise Linux, Czech branch as a maintainer of cryptography-related pacakages, but it wasn’t a paid position much less full-time.

Now Mr. Mraz started works recently as a cybersecurity auditor for National Cyber and Information Security Agency, Czechoslovakia (unkib.cz). His first paid security-related job outside of OpenSSL, presumably.

I suspect that there is a indirect jab in there somewhere and not directed against Mr. Mraz either.

> I suspect that there is a indirect jab in there somewhere and not directed against Mr. Mraz either.

Mraz is not a member of the OMC, so the jab wasn't at him :)

Just letting you know that Czechoslovakia does not exist any more. A few decades ago it became Czech republic and Slovak republic.

It’s fascinating to me how people don’t know this.

I was browsing some Time magazines from the 1960s and was surprised such a known magazine was using Russia instead of USSR in myriads of articles. I guess the same goes here.

Russia existed throughout the 1960s (and indeed, for quite a while before that). It was a member of the USSR, but that didn't stop it from existing. Like how Scotland exists, despite being a part of the UK.

Also, England vs. the UK, Holland vs. the Netherlands and the US vs. America

Really good read on this recently, "The QUIC API OpenSSL Will Not Provide"[1].

Having read that, very nice to see this, a proper more directly targeted plea for sensibility go out.

[1] https://daniel.haxx.se/blog/2021/10/25/the-quic-api-openssl-... https://news.ycombinator.com/item?id=29038728

Maybe the HN title can be "Please change your mind about QUIC", since that's what most of it is about.

If you read the proposed project plan, OpenSSL next couple of releases are in fact "all about QUIC" So asking I thought the Subject line was accurate.

I am confused: I thought just days ago the curl author was upset that OpenSSL had decided to stop working on QUIC, but now someone is pleading with them to stop working on QUIC, as if they were still working on QUIC, but I thought they weren't working on QUIC anymore?

(FWIW, as a user of OpenSSL, I am on team "don't put QUIC in OpenSSL". If they are going to prioritize anything, it should be DTLS 1.3.)

There was a patch that adds QUIC support, but recently steering committee have announced that they are not going to merge it and will implement their own version instead.

Just get your openssl QUIC support here: https://github.com/quictls/openssl

Reply on news.ycombinator.com