Advanced

speaks volumes

Story: Open Source encryption module loses FIPS certificationTotal Replies: 5
Author Content
jsusanka

Jul 18, 2006
4:37 AM EDT 		"Weathersby said OpenSSL has been challenged by companies with competing proprietary encryption technologies, and that those challenges are aided by the open-source model, which makes source code for the tools publicly available.

“Now the opposing forces have the luxury of going in and trying to pick us apart,” he said. “That’s fine. That’s fair. This is about dollars and cents. This is not about technology.” "

this speaks volumes - sort of reminds of Massachusetts and odf. hmm-

this should make openssl stronger in the end though. but this makes me wonder about the process and the other proprietary products and how good they actually are.
dinotrac

Jul 18, 2006
6:19 AM EDT 		>this should make openssl stronger in the end though

Challenge is the only reliable way to develop security. The open approaches are thus likely to be more secure than proprietary alternatives -- at least in the long run.

Unless, of course, no software company has ever had a disgruntled, dishonest, fired, etc employee.
TPuffin

Jul 18, 2006
10:14 AM EDT 		dino,

Well, all the software developers I've ever heard of were highly paid, well respected, and content, so it shouldn't be a problem.

Oh, wait - I forgot to add "... cue dream sequence ..." to the beginning of my post.
tuxchick2

Jul 18, 2006
10:46 AM EDT 		Holy SCO, Batman!

"There is a big problem and your butt is grass." "What is the problem?" "If you don't know, we're certainly not going to tell you."
Bob_Robertson

Jul 18, 2006
11:03 AM EDT 		#$%^& government. Someone with money got to them and bought them off just like government has always been bought off.

I wonder whose feathers OpenSSL was ruffling the most. Hmmm...
Sander_Marechal

Jul 18, 2006
1:37 PM EDT
Quoting: Holy SCO, Batman!

"There is a big problem and your butt is grass." "What is the problem?" "If you don't know, we're certainly not going to tell you."


I don't think that's the case here. I think that the OpenSSL team does know the reasons and probabely keeps it under wraps untill they issue a patch.

Post a reply to this thread:

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post