With ya up until this. The core crypto code works. The framework around it is aged, crufty, and could use a refactor/rewrite. But tossing the baby out is not useful here. Just wash the kid and put on some new clothes and he'll fit right in again.
LibreSSL is going in the right direction (specific questionable decisions notwithstanding). Hopefully someone will bring over some of that love to the main codebase.
Agreed. Even Theo sees the value in a popular but crappy crypto lib that works that just needs a good gutting. Starting from scratch would be costly reinventing a security wheel and likely incompatible with OpenSSL... IOW dead-on-arrival.
With ya up until this. The core crypto code works. The framework around it is aged, crufty, and could use a refactor/rewrite. But tossing the baby out is not useful here. Just wash the kid and put on some new clothes and he'll fit right in again.
LibreSSL is going in the right direction (specific questionable decisions notwithstanding). Hopefully someone will bring over some of that love to the main codebase.