From owner-freebsd-current@FreeBSD.ORG Fri Apr 25 09:00:47 2014 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 3686F5DC for ; Fri, 25 Apr 2014 09:00:47 +0000 (UTC) Received: from d.mail.sonic.net (d.mail.sonic.net [64.142.111.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 180E814C0 for ; Fri, 25 Apr 2014 09:00:46 +0000 (UTC) Received: from mail-ig0-f176.google.com (mail-ig0-f176.google.com [209.85.213.176]) (authenticated bits=0) by d.mail.sonic.net (8.14.4/8.14.4) with ESMTP id s3P90dLQ019685 (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NOT) for ; Fri, 25 Apr 2014 02:00:39 -0700 Received: by mail-ig0-f176.google.com with SMTP id uy17so1938881igb.15 for ; Fri, 25 Apr 2014 02:00:38 -0700 (PDT) MIME-Version: 1.0 X-Received: by 10.42.64.131 with SMTP id g3mr5997863ici.15.1398416438928; Fri, 25 Apr 2014 02:00:38 -0700 (PDT) Received: by 10.64.9.242 with HTTP; Fri, 25 Apr 2014 02:00:38 -0700 (PDT) In-Reply-To: References: <20140424223540.627bf130.ohartman@zedat.fu-berlin.de> <535984EC.7050509@mu.org> <20140425033141.GB28939@lonesome.com> Date: Fri, 25 Apr 2014 05:00:38 -0400 Message-ID: Subject: Re: OpenSSL vs. LibreSSL (OpenBSD) From: Zack Gold To: Matthias Gamsjager Content-Type: text/plain; charset=ISO-8859-1 X-Sonic-ID: C;tBl6EljM4xGGOJxB+Bh/TQ== M;FLuqEljM4xGGOJxB+Bh/TQ== X-Mailman-Approved-At: Fri, 25 Apr 2014 12:00:13 +0000 Cc: FreeBSD Current X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Apr 2014 09:00:47 -0000 An important thing to note here is motive. The Linux Foundation is housing this "Core Infrastructure Initiative" project, and so they are the ones who get all the money. "The Initiative's funds will be administered by the Linux Foundation and a steering group comprised of backers of the project as well as key open source developers and other industry stakeholders." So, it might be in the interest of these people to not necessarily fix bugs. They might be interested in other things, like ownership. Though, this may be a bit irrational. On Fri, Apr 25, 2014 at 4:56 AM, Matthias Gamsjager wrote: > Not per se more but with money it can become someones full-time job. > No sure about LibreSSL. Wouldn't it be easier and keeping in mind that > money and resources are scares in the BSD camps to use the, hopefully, > heavily funded openSSL? > > On Fri, Apr 25, 2014 at 10:46 AM, Zack Gold wrote: >> More money does not necessarily mean more manpower, but it's a good start.