8 ms·
This is the correct title, but a more informative one would have been: OpenSSL releases will now be distributed through GitHub Dmitry Misharov's reasoning: >
by pubg 2y ago
This is the correct title, but a more informative one would have been:
OpenSSL releases will now be distributed through GitHub
Dmitry Misharov's reasoning:
> Safety first: The web’s come a long way in terms of security, and sticking to HTTPS helps keep everyone safer.
> Keeping it simple: Fewer methods of distribution mean less clutter and confusion, letting us focus on making OpenSSL even better.
> Watching the budget: Streamlining things cuts costs, which means we can spend more on improving OpenSSL and supporting you all.
I wonder what hosting was costing the OpenSSL project and how many servers will be decommissioned. I hope they really do follow through on point #3 of reallocating the funds towards improvements.
At first I had a very negative reaction to this news, because it further entrenches the reliance on GitHub (a for-profit company owned by Microsoft). Then after reflecting, I imagine if GitHub becomes unattractive (for example, the policies become unfriendly), it can always be switched back to host on openssl.org.