From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gentoo-dev+bounces-65666-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
	by finch.gentoo.org (Postfix) with ESMTP id 6CFD4138A1F
	for <garchives@archives.gentoo.org>; Mon, 14 Apr 2014 21:21:04 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id 9E7A7E0BA6;
	Mon, 14 Apr 2014 21:20:57 +0000 (UTC)
Received: from smtp2-g21.free.fr (smtp2-g21.free.fr [212.27.42.2])
	by pigeon.gentoo.org (Postfix) with ESMTP id AEB0BE0B92
	for <gentoo-dev@lists.gentoo.org>; Mon, 14 Apr 2014 21:20:56 +0000 (UTC)
Received: from [IPv6:2a01:e35:8bb2:53e0:ae22:bff:fedc:56a8] (unknown [IPv6:2a01:e35:8bb2:53e0:ae22:bff:fedc:56a8])
	by smtp2-g21.free.fr (Postfix) with ESMTP id F33B94B009E
	for <gentoo-dev@lists.gentoo.org>; Mon, 14 Apr 2014 23:20:54 +0200 (CEST)
Message-ID: <1397509972.27093.2.camel@localhost>
Subject: Re: [gentoo-dev] Akamai secure memory allocator for OpenSSL?
From: =?ISO-8859-1?Q?R=E9mi?= Cardona <remi@gentoo.org>
To: gentoo-dev@lists.gentoo.org
Date: Mon, 14 Apr 2014 23:12:52 +0200
In-Reply-To: <534BA0E3.5010609@gentoo.org>
References: <534AF6A8.6070001@gentoo.org> <534BA0E3.5010609@gentoo.org>
Content-Type: text/plain; charset="UTF-8"
X-Mailer: Evolution 3.10.4 
Precedence: bulk
List-Post: <mailto:gentoo-dev@lists.gentoo.org>
List-Help: <mailto:gentoo-dev+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-dev+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-dev+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-dev.gentoo.org>
X-BeenThere: gentoo-dev@lists.gentoo.org
Reply-to: gentoo-dev@lists.gentoo.org
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Archives-Salt: 4491c467-8319-4edb-a2e5-14fa26c78320
X-Archives-Hash: 42d5e2a178ae4e3214aeed15a88cab39

Le lundi 14 avril 2014 à 10:48 +0200, Tiziano Müller a écrit :
> Not really, no. I would rather wait until other people have reviewed
> and/or it has been pulled into openssl.
> 
> To cite the Akamai dev who posted the patch [1]:
> "Let me restate that: *do not just take this patch and put it into
> production without careful review.*"

http://lekkertech.net/akamai.txt

I, for one, am glad we didn't pull this in right away. OpenSSL is under
a lot of scrutiny now, so let's not rush any patches.

Cheers

Rémi