Skip to main content


"The #OpenSSL project really seems to be in a dead end for me, it's incompatible with #QUIC and unfixable performance-wise" / Willy Tarreau

mailarchive.ietf.org/arch/msg/…

in reply to daniel:// stenberg://

I'm looking for people to join a fork of OpenSSL to Apache. Please forward for reach. I have a draft proposal I can share.

daniel:// stenberg:// reshared this.

in reply to daniel:// stenberg://

I’m not particularly vested in OpenSSL, but for us (BIND 9), there are two main problems with the competitors: a) missing PKCS#11 support (we dropped native PKCS#11 support for engine/provider), b) license - we need MPL compatible license that doesn’t affect the compiled binaries.
in reply to daniel:// stenberg://

following mastodon.social/@bagder/109624… there is also RusTLS: github.com/rustls/rustls
(which is also funded by @sovtechfund via @ProssimoISRG )


there's of course this companion book
in reply to pink

@pink @sovtechfund @ProssimoISRG curl already supports it. rustls is indeed a worthy effort but still has ways to go.