[talk] funding news

George Rosamond george at ceetonetechnology.com
Thu May 29 22:19:36 EDT 2014


Brian Coca:
> http://www.linuxfoundation.org/news-media/announcements/2014/05/core-infrastructure-initiative-announces-new-backers
>
>  Looks like good news, specially that openssh is getting some love.
> Not sure how well it will work out, but i have hope.
> 
> One issue I have, is that since heartbleed there has been a lot of
> talk about openssl being in bad shape because of a lack of funds.
> Yes, funding was an issue, but it was not the only reason it has had
> so many problems with the code. I think the libressl project has
> shown this commit by commit.

So what I find interesting, once again, is the chorus of comments
ripping OpenSSL and/or supporting LibreSSL.  The /. crowd is starting to
seem rational.

The OpenSSL funding argument makes no sense... the problem seemed to be
lack of focus and trajectory of dev, not money.

All LibreSSL had to do to make a splash was proclaim: it's all broken,
and we're slashing and burning.  That gave it credibility off the bat.
But the huge long-term attraction is that these are devs who've already
sustained core projects.  *That* seems to be the missing element is so
many splashy open source projects.

If you haven't yet seen the Beck slides, please stop what you're doing
and take the time.  OpenSSH was born when most people (I'd guess) were
using telnet for remote management.  I was at the time at least.
LibreSSL is coming when a widespread plague needs triage.

g



More information about the talk mailing list