[dead]
OpenSSH is "insecure and bug-ridden"? Perhaps you're thinking of OpenSSL? As I understand it OpenSSH has had a pretty good security track record.
If so, consider donating to the OpenBSD foundation. See libreSSL.
Re:OpenBSD 6.1 is not a CD release
by AsyncAwait on Sunday April 16, 2017 @09:42AM
(#14125748)
Huh? Perhaps you confused OpenSSH with OpenSSL? Just to clarify, OpenSSH implements the SSH protocol, an encrypted Telnet replacement for remote login into machines. OpenSSL is used to secure web traffic in transit and is the one with the Heartbleed fiasco. They're different entities.
I think the grandparent is indeed confused, but just to be pedantic: OpenSSH used to use OpenSSL as it's library for cryptography primitives. Of course, it switched to LibreSSL when LibreSSL was forked from OpenSSL.
No, I was indeed referring to OpenSSH which has had its share of security vulnerabilities too.
Now I'm really curious what software doesn't qualify as an "insecure, bug-ridden mess" in your book.
I'm going to guess you meant OpenSSL, in which case yes, there is a Foundation for that. Perhaps (not so) surprisingly, it's the same one that supports OpenSSH development. You'll find LibreSSL mentioned right on the front page!