Skip to main content


"The #OpenSSL project really seems to be in a dead end for me, it's incompatible with #QUIC and unfixable performance-wise" / Willy Tarreau

https://mailarchive.ietf.org/arch/msg/quic/zur-ripWUGsbllG5UxZHUpUpWyM/

in reply to daniel:// stenberg://

I'm looking for people to join a fork of OpenSSL to Apache. Please forward for reach. I have a draft proposal I can share.

daniel:// stenberg:// reshared this.

in reply to daniel:// stenberg://

I’m not particularly vested in OpenSSL, but for us (BIND 9), there are two main problems with the competitors: a) missing PKCS#11 support (we dropped native PKCS#11 support for engine/provider), b) license - we need MPL compatible license that doesn’t affect the compiled binaries.
in reply to pink

@pink @sovtechfund @ProssimoISRG curl already supports it. rustls is indeed a worthy effort but still has ways to go.