Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I respect the work you're doing on LibreSSL and OpenBSD. The release of this portable LibreSSL arrived much sooner than anyone expected and that's commendable. I think pretty much everyone expected it to be released in OpenBSD first and later as a portable version.

However, I really like to download code related to cryptography securely. Perhaps you didn't have the resources or the time to do this.

There were a few easy to do things: posting the hashes of the downloads in various places like GitHub, mailing lists, this HN thread and a few others. GitHub is useful for serving source releases, as long as you post the hashes in more places.

OpenSSL has been heavily criticized. That has been debated ad nauseam in countless places. The one thing I like about OpenSSL is that they're providing secure downloads. Their code might be bad, but at least you can download it from them via HTTPS.

Many would like to contribute, but the OpenBSD project isn't the friendliest (that's a mild way to put it).



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: