#opensslcon26 — Public Fediverse posts

Neil Horman and Bob Beck showed at the #OpenSSLCon26 that #OpenSSL providers don't have to mean things are slow. The graphs show awesome performance improvements for multi-threaded use, and significant improvements in average X.509 use in TLS, with more X.509 parsing optimizations currently in progress. This should help address the legitimate concerns raised by PyCA and haproxy over the last year. Recommended watch when recording is out!

https://openssl2026.sched.com/event/2VSQR

Well, that was a first: during a talk by a presenter from #AISLE, power went out in the entire hotel. We got one phase back pretty quickly, but the AV needed all three, which took 35 minutes. After a while, the talk continued with slides shown over Google Meet on mobile network to laptops and phones in the room, with the address shouted across the room in NATO alphabet.

Upshot: Screenshots are better than pictures 😂

#OpenSSL #OpenSSLCon26

There are in fact #curl stickers available at the #OpenSSL conference. Come to the registration desk to get yours!

#OpenSSLCon26

One option to help upstream projects: put your engineers upstream! Over half of substantive changes in #OpenSSL 3.5 came from other companies.

#OpenSSLCon26

"The question was never whether #OpenSource code is free. It is who pays the reviewers" -- Kajal Sapkota from #OpenSSL Corporation

#OpenSSLCon26

In #OpenSSL some volunteers write code, almost nobody volunteers to review other people's code at scale. -- Kajal Sapkota from OpenSSL Corporation.

#OpenSSLCon26

11 core #OpenSource packages run on one or two maintainers, e.g. zlib, sudo, bash, and the time-zone database.

#OpenSSL #OpenSSLCon26

Kajal Sapkota on "Who pays for #OpenSource": the year before Heartbleed, #OpenSSL received $2,000 in donations.

"For reference, that's what I pay in rent each month"

#OpenSSLCon26

If you're in a small business and want to provide input on what #OpenSSL is working on, the are free seats representing small businesses on the OpenSSL Corporation Advisory Committees.

Reach out, I can put you in touch.

#OpenSSLCon26 #cryptography #OpenSource

#OpenSSL 4 should be a nice speed-up compared to 3.6, which was already heaps faster than the problematic 3.0 release. This is good news.

#OpenSSLCon26

From @mold's keynote: The avalanche of security reports from #OpenSSL's point of view: from 9 reports a months to 70.

#OpenSSLCon26 #CVE

#OpenSSL now has a site listing research cooperations with universities at https://research.openssl.org/

#OpenSSLCon26 #cryptography