From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 122401382C5 for ; Tue, 29 Dec 2020 22:41:45 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 6651BE0D12; Tue, 29 Dec 2020 22:41:42 +0000 (UTC) Received: from foo.stuge.se (foo.stuge.se [212.116.89.98]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id E6A6BE0D0D for ; Tue, 29 Dec 2020 22:41:41 +0000 (UTC) Received: (qmail 9824 invoked by uid 1000); 29 Dec 2020 22:41:38 -0000 Message-ID: <20201229224138.9823.qmail@stuge.se> Date: Tue, 29 Dec 2020 22:41:38 +0000 From: Peter Stuge To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] [RFC] Discontinuing LibreSSL support? References: <2e61ab0e-5597-2e11-687a-2ab647af48e6@gentoo.org> <9fc245a5be8211a7e92e6321be313bfd7060462e.camel@gentoo.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <9fc245a5be8211a7e92e6321be313bfd7060462e.camel@gentoo.org> X-Archives-Salt: 6a72e4c5-0e2b-46c3-a901-d3070abd60cc X-Archives-Hash: 745935f0290b2556d7994d9f3eeab836 Michał Górny wrote: > > I would be happier if some other developers were able and willing to > > participate actively in the LibreSSL project. > > But why would they do that? What I'm really missing in all the replies > is a single reason why LibreSSL would be better for anyone. Maybe because it is so well-known that monoculture is harmful per se, which is why the commitment to choice in Gentoo is very valuable. Further, LibreSSL comes out of the OpenBSD project, which has a good reputation on code quality. > a real proper, verifiable argument 'LibreSSL is better in this regard'. Choice is about enabling people to decide for themselves. Choice is /not/ about forcing people to formally prove utility to yourself. I acknowledge that what I suggest isn't immediately enabling libressl as a choice either, but it is at least far less destructive than masking and removal. //Peter