Re: Fwd: [DISCUSS] Move from OpenSSL to LibreSSL

2016-02-07 Thread Vadim
John, I think you touched up serious problem that should be cosidered by security team to judge how this may influence product development cycle and make a decision. Big players (like Google https://www.imperialviolet.org/2015/10/17/boringssl.html) has already made this. To broaden t

Re: Fwd: [DISCUSS] Move from OpenSSL to LibreSSL

2016-02-07 Thread Vadim
John, I think you touched up serious problem that should be cosidered by security team to judge how this may influence product development cycle and make a decision. Big players (like Google https://www.imperialviolet.org/2015/10/17/boringssl.html) has already made this. To broaden t

Fwd: [DISCUSS] Move from OpenSSL to LibreSSL

2016-02-05 Thread John Kinsella
(whoops - accidentally replied privately, bringing back to mailing list - hope Vadim’s OK with that) Realize the SSVM and VR provide “public” services - https is open on the console proxy, vpn services are open on the virtual router. And unfortunately yes, people usually only think about impro