11–20 of 24 posts
Good news for FreeBSD. I agree that LibreSSL is the best bet for the future.
Good news for FreeBSD. I agree that LibreSSL is the best bet for the future.
There also BoringSSL[1] but that might be even more of a departure than LibreSSL in terms of API compatibility. I still think it's surprising that we don't see more BoringSSL being used especially with nginx. [1] https://boringssl.googlesource.com/boringssl/
iTWire - Crypto: FreeBSD playing catch-up, says De Raadt: http://www.itwire.com/business-it-news/open-source/62641-cry...
Outside of the BSDs, Void Linux is a linux distro that uses LibreSSL instead of OpenSSL and they also have a stable musl flavor (no glibc).
Earlier quoted context omitted.
There also BoringSSL[1] but that might be even more of a departure than LibreSSL in terms of API compatibility. I still think it's surprising that we don't see more BoringSSL being used especially with nginx. [1] https://boringssl.googlesource.com/boringssl/
Why would you use it, if the people making it explicitly recommend against you doing so?
But to answer your question, why would someone choose to use it anyway? One reasonable justification is that many people believe (probably myself included) that the quality is superior to openssl or libressl. The APIs are unstable but the flip side of that coin is that they're probably better. Also the engineering practices behind boringssl have lead to what I would call relatively high quality code. It's well structured, clear, and maybe less likely to suffer as many serious bugs as the alternatives. Time will tell.
Not that I'm recommending it for everyone, just answering your question. Quality is often in the eye of the beholder, use what works best for you.
It's awesome that cool things from OpenBSD are being ported over to FreeBSD, but why not just use OpenBSD from the get-go? It's already a struggle having to deal with FreeBSD's outdated version of pf. iTWire - Crypto: FreeBSD playing catch-up, says De Raadt: http://www.itwire.com/business-it-news/open-source/62641-cry...
Maybe there is a group of people out there that don't want to deal with that ... guy.
Outside of the BSDs, Void Linux is a linux distro that uses LibreSSL instead of OpenSSL and they also have a stable musl flavor (no glibc).
It's awesome that cool things from OpenBSD are being ported over to FreeBSD, but why not just use OpenBSD from the get-go? It's already a struggle having to deal with FreeBSD's outdated version of pf. iTWire - Crypto: FreeBSD playing catch-up, says De Raadt: http://www.itwire.com/business-it-news/open-source/62641-cry...
Outside of the BSDs, Void Linux is a linux distro that uses LibreSSL instead of OpenSSL and they also have a stable musl flavor (no glibc).
Gentoo ~x86/~amd64 also supports LibreSSL with the "libressl" USE flag. Makes for a great hardened (Grsecurity/PaX) install for servers/chromebooks.