Date: Thu, 8 Feb 2018 18:16:47 +0000
From: Kevin Chadwick <m8il1ists@gmail.com>
To: alpine-devel@lists.alpinelinux.org
Subject: Re: [alpine-devel] Proposed change: openssl 1.1 as default system
 openssl implementation
Message-ID: <20180208181647.1e8e6eed@mechanicum.chadwicks.me.uk>
In-Reply-To: <c486d19c-905d-83f3-c0fa-bdedf5d7e1aa@adelielinux.org>
References: <CA+T2pCGFeh30aEi43hAvJ3yoHBijABy_U62wfjhVmf3FmbNUUg@mail.gmail.com>
	<c486d19c-905d-83f3-c0fa-bdedf5d7e1aa@adelielinux.org>
Precedence: list
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

On Thu, 8 Feb 2018 12:09:38 -0600


> > openssl 1.1 has a different situation: Akamai and the Core
> > Infrastructure Initiative have come together to sponsor development
> > and maintenance of openssl since we switched, which means that
> > there's higher quality maintenance occuring now.  
> 
> This is good to hear, I didn't know about Akamai's involvement.

I am fairly sure that funding was never a real issue and certainly not
one that could explain heartbleed.

Akamai is probably also one of the lead reasons why people think
websites are secure when they are not necessarily too (akamai cert for
akamai server for download of acme.exe). Simplicity, cost issue?

Who's Responsibility? Just the download providers domain?


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---