Story

OpenSSL bug sparks new development

Preview

You're not linking to the original OpenSSL repo (Score: 4, Informative)

by codersean@pipedot.org on 2014-04-16 06:04 (#133)

The links in the article are to OpenBSD's version of OpenSSL, OpenSSL proper is NOT an OpenBSD project (can be found here: http://www.openssl.org/source/repos.html). The naming is unfortunate. Just to straighten this out, OpenSSH is by OpenBSD.

Now if I was going to pick one group that I would trust to do a proper OpenSSL it would be the OpenBSD group, hoping they do a full on fork and provide a cross-platform version like OpenSSH.

Re: You're not linking to the original OpenSSL repo (Score: 2, Interesting)

by nightsky30@pipedot.org on 2014-04-16 12:25 (#138)

Not sure where I saw it yesterday, but someone else made a similar statement in that the changes they are making over at openBSD might never end up merged back into openSSL proper. If they do merge the changes into openSSL proper, excellent. If they don't merge the changes from openBSD, then I don't really mind a fork in the name of security. If that were the case, hopefully other *nix OSs would switch.

Moderation

Time Reason Points Voter
2014-04-16 17:23 Interesting +1 songofthepogo@pipedot.org

Junk Status

Not marked as junk