Re:OpenSSL Releases Distribution Changes
by pubg on Thursday May 02, 2024 @10:38AM
(#40236830)
This is the correct title, but a more informative one would have been:
OpenSSL releases will now be distributed through GitHub
Dmitry Misharov's reasoning:
> Safety first: The web’s come a long way in terms of security, and sticking to HTTPS helps keep everyone safer.
> Keeping it simple: Fewer methods of distribution mean less clutter and confusion, letting us focus on making OpenSSL even better.
> Watching the budget: Streamlining things cuts costs, which means we can spend more on improving OpenSSL and supporting you all.
I wonder what hosting was costing the OpenSSL project and how many servers will be decommissioned. I hope they really do follow through on point #3 of reallocating the funds towards improvements.
At first I had a very negative reaction to this news, because it further entrenches the reliance on GitHub (a for-profit company owned by Microsoft). Then after reflecting, I imagine if GitHub becomes unattractive (for example, the policies become unfriendly), it can always be switched back to host on openssl.org.
OpenSSL releases will now be distributed through GitHub
Dmitry Misharov's reasoning:
> Safety first: The web’s come a long way in terms of security, and sticking to HTTPS helps keep everyone safer.
> Keeping it simple: Fewer methods of distribution mean less clutter and confusion, letting us focus on making OpenSSL even better.
> Watching the budget: Streamlining things cuts costs, which means we can spend more on improving OpenSSL and supporting you all.
I wonder what hosting was costing the OpenSSL project and how many servers will be decommissioned. I hope they really do follow through on point #3 of reallocating the funds towards improvements.
At first I had a very negative reaction to this news, because it further entrenches the reliance on GitHub (a for-profit company owned by Microsoft). Then after reflecting, I imagine if GitHub becomes unattractive (for example, the policies become unfriendly), it can always be switched back to host on openssl.org.