Re: [DISCUSS] Move from OpenSSL to LibreSSL

2016-02-07 Thread Vadim
p in libressl in the next week or two and see what happens John Begin forwarded message: FROM: Vadim SUBJECT: RE: [DISCUSS] MOVE FROM OPENSSL TO LIBRESSL DATE: February 4, 2016 at 11:43:07 PM PST TO: John Kinsella Thank you for explanation, John. I am not involved into CS security

Re: Fwd: [DISCUSS] Move from OpenSSL to LibreSSL

2016-02-07 Thread Vadim
p in libressl in the next week or two and see what happens John Begin forwarded message: FROM: Vadim SUBJECT: RE: [DISCUSS] MOVE FROM OPENSSL TO LIBRESSL DATE: February 4, 2016 at 11:43:07 PM PST TO: John Kinsella Thank you for explanation, John. I am not involved into CS security

Re: Fwd: [DISCUSS] Move from OpenSSL to LibreSSL

2016-02-07 Thread Vadim
p in libressl in the next week or two and see what happens John Begin forwarded message: FROM: Vadim SUBJECT: RE: [DISCUSS] MOVE FROM OPENSSL TO LIBRESSL DATE: February 4, 2016 at 11:43:07 PM PST TO: John Kinsella Thank you for explanation, John. I am not involved into CS security

Fwd: [DISCUSS] Move from OpenSSL to LibreSSL

2016-02-05 Thread John Kinsella
improving security after issues are found - that’s why security geeks like me are around. :) I’ll see if I can drop in libressl in the next week or two and see what happens…. John > Begin forwarded message: > > From: Vadim > Subject: Re: [DISCUSS] Move from OpenSSL to LibreSSL > D

Re: [DISCUSS] Move from OpenSSL to LibreSSL

2016-02-04 Thread Vadim
John, Can CS community decide that? From my point of view this is OS distribution owner who does. OpenSSL is system package and you probably can't skip it, unless you create your own Linux distribution. Vadim. On 2016-02-03 17:48, John Kinsella wrote: Folks - another OpenSSL vulnerabili

[DISCUSS] Move from OpenSSL to LibreSSL

2016-02-03 Thread John Kinsella
Folks - another OpenSSL vulnerability was announced last week[1]. I believe our current SSVMs are running Wheezy, so they should be OK according to [2]. This makes me ponder, though: Should we consider moving to LibreSSL[3] in the future? For those not familiar, it’s a fork of OpenSSL with more