Tootfinder

#OpenSSL has gotten big, this is just the staff of the Corporation, and there's people working for the Foundation, too.
#OpenSSLCon26

#OpenSSL 4 should be a nice speed-up compared to 3.6, which was already heaps faster than the problematic 3.0 release. This is good news.
#OpenSSLCon26

One option to help upstream projects: put your engineers upstream! Over half of substantive changes in #OpenSSL 3.5 came from other companies.
#OpenSSLCon26

In #OpenSSL some volunteers write code, almost nobody volunteers to review other people's code at scale. -- Kajal Sapkota from OpenSSL Corporation.
#OpenSSLCon26

From @…'s keynote: The avalanche of security reports from #OpenSSL's point of view: from 9 reports a months to 70.
#OpenSSLCon26

There are in fact #curl stickers available at the #OpenSSL conference. Come to the registration desk to get yours!
#OpenSSLCon26

"You started BouncyCastle when OpenSSL already existed. Why write another cryptography library?"
David Hook: "Oh, why not."
"For about two years I got hate mail for giving it a stupid name."
#OpenSSL #OpenSSLCon26

11 core #OpenSource packages run on one or two maintainers, e.g. zlib, sudo, bash, and the time-zone database.
#OpenSSL #OpenSSLCon26

"3.0 was not a particularly lucky release, there were lots of performance problems to fix"
-- @…
I guess you could say that, yeah. 😂
#OpenSSL #OpenSSLCon26

If you're in a small business and want to provide input on what #OpenSSL is working on, the are free seats representing small businesses on the OpenSSL Corporation Advisory Committees.
Reach out, I can put you in touch.
#OpenSSLCon26

"The question was never whether #OpenSource code is free. It is who pays the reviewers" -- Kajal Sapkota from #OpenSSL Corporation
#OpenSSLCon26

#OpenSSL now has a site listing research cooperations with universities at #OpenSSLCon26

Kajal Sapkota on "Who pays for #OpenSource": the year before Heartbleed, #OpenSSL received $2,000 in donations.
"For reference, that's what I pay in rent each month"
#OpenSSLCon26