Hacker News Reader

LibreSSL is yet very experimental and OpenBSD-focused.

Which is not wrong, but I wouldn't say it's right now well-baked for inclusion in major Linux distributions.

You're vastly overstating the difficulty in porting LibreSSL. It's 99% POSIX standard use of APIs and modern portable C except for a few security related functions they use that are non-standard such as explicit_bzero, reallocarray, and strlcpy.

Indeed https://marc.info/?l=openbsd-tech&m=140332790726752&w=2 there are portable versions of strlcpy, explicit_bzero ect.

Not everything is as easy to port as strlcpy... Implementing a correct arc4random on Linux is quite non-trivial

It's also a couple of months old. Give it a year's time (or half that, even) and that possibility of a proper non-OpenBSD *nix port will be that much more likely.

Reply on news.ycombinator.com