LibreSSL: The first 30 days, and what the Future Holds

Andrea Ross · 5.1K views · 2014-05-18 · 1:05:51

Open on YouTube ↗

If playback is restricted in your region, try opening the original video. Use Mark watched to add it to your marked videos.

Overview

Bob Beck of OpenBSD gives a BSDCan 2014 talk on the first month of LibreSSL, the OpenSSL fork. He explains why they forked, what they removed, and examples of the problems found in the OpenSSL code base.

On Hacker News

Recommended as a funny, fascinating tour of how bad the OpenSSL code was and what cleanup looks like.

Recommended by 3 HN people across 3 months · HN mentions 2014–2022

Topics

Cryptography Security & hacking Linux & open-source ecosystems

What people said

yakubin · 2022-10 · Recommendation
I'd expect higher quality code review from OpenBSD folks (who maintain LibreSSL), compared to OpenSSL. Also, an interesting talk: LibreSSL: The first 30 days, and what the Future Holds from BSDCan: < [VIDEO] >
Read the original HN comment ↗

mrweasel · 2020-05 · Recommendation
There is a fascinating and funny talk by Bob Beck from OpenBSD on the first 30 days after forking OpenSSL. One of the things he addresses is the scary code and how is prevents community involvement. He also talks a great deal about all that stuff that's not really relevant anymore and how much they removed from the LibreSSL source code. Apparently the crypto modules are pretty well made according to the OpenBSD developers. LibreSSL: The first 30 days, and what the Future Holds: [VIDEO]
Read the original HN comment ↗

ivoras · 2014-05 · Recommendation
Anyone interested in details of LibreSSL development can watch the BSDCan talk at [VIDEO] - there really are a LOT of instances of braindamaged code in OpenSSL and a radical repair is pretty much the only thing which will work.
Read the original HN comment ↗

Sources

Video by Andrea Ross, played through YouTube.

HN Library · Source license

Data and selection notes

HN summaries and labels may contain AI errors. HN dates refer to discussions, not video publication.

HN Library: HackerTube export (2026-10-31) and open-index/hacker-news. Upstream summaries and classifications may contain AI errors.

Views, duration and playback status refresh separately from the published catalog. When an update fails, existing data remains visible.

Selection checks

SaaS & AI candidates: Topic keywords do not match
Editor-approved picks: Editorial review is required

Rule matches identify candidates. They do not guarantee video quality or financial results.

About the library and its sources