News for hackers. Stuff that matters.
Re:Core Infrastructure Initiative by remon on Thursday April 24, 2014 @10:12AM (#7640344)
I think it's spectacularly naive to assume LibreSSL will be widely adopted beyond FreeBSD just because it's a cleaner codebase.
Re:Core Infrastructure Initiative by nayden on Thursday April 24, 2014 @12:01PM (#7641105)
The primary goal of LibreSSL is to fix the OpenSSL codebase for OpenBSD. If other communities like the changes there could be a portable versions as alluded by the LibreSSL web site.

Think OpenSSH -> OpenSSH-portable.

Re:Core Infrastructure Initiative by clarry on Thursday April 24, 2014 @10:19AM (#7640387)
Just because.

What if it also had fewer bugs, is more receptive to contributed bug fixes, runs clean in Valgrind, etc.?

Re:Core Infrastructure Initiative by midas007 on Thursday April 24, 2014 @11:28AM (#7640872)
The point of LibreSSL is to be a potential competitor and an apparent existential threat to scare OpenSSL into getting its house in order.
Re:Core Infrastructure Initiative by clarry on Thursday April 24, 2014 @11:39AM (#7640944)
I don't think that's the point. I think OpenBSD devs just want secure code, and they get it by doing the work. So that's what they do. No hidden agendas.
Re:Core Infrastructure Initiative by nayden on Thursday April 24, 2014 @12:06PM (#7641130)
If this fork makes OpenSSL developers be more responsive to patch fixes and have them improve their documentation it's a win for OpenSSL and their users at large.

OpenBSD is already reaping the benefits from a better TSL implementation in -current so it's a win for our project as well.

This is a win win scenario.

Re:Core Infrastructure Initiative by midas007 on Thursday April 24, 2014 @02:29PM (#7642003)
Exactly. When a popular security project has no clear competition, a code "monopoly" may exist and it's much easier to get complacent. By introducing "competition," it tends to keep both projects adversarial and vigilant... which is exactly what a security project needs.