Hacker News Reader

I'd encourage folks to read the recently-published statement [1] about the state of OpenSSL from Python's cryptography project.

We're recording a Security Cryptography & Whatever with them in an hour or so, if anyone's got questions they want us asking Alex and Paul.

True facts: Paul co-created Frinkiac.

Instead of everybody switching to LibreSSL, we had the Linux Foundation reward OpenSSL's incompetence with funding.

We are still suffering from that mistake, and LibreSSL is well-maintained and easier to migrate to than it ever was.

What the hell are we waiting for?

Is nobody at Debian, Fedora or Ubuntu able to step forward and set the direction?

How about standardizing on an API, then switching backends can be up to the administrator of the machine.

LibreSSL has put serious effort into making itself interchangeable with openssl.

OpenSSL as the incumbent has no incentive to do the same.