So, good for OpenSSL for getting better. More better crypto libraries benefit everyone. Who benefits from OpenSSL remaining terrible?
I certainly don't think libressl deserves any sort of prize, but it does seem a little weird to give an award designated for advancement for something more like hitting par. If they'd been better to start, then no award? Most improved awards have strange incentives.
This award did feel a little different. I can't build anything on top of OpenSSL in quite the same way that I can take the signal protocol and build on it. (All the other winners did something that's useful to rust, too. :))
I certainly don't think libressl deserves any sort of prize, but it does seem a little weird to give an award designated for advancement for something more like hitting par. If they'd been better to start, then no award? Most improved awards have strange incentives.
This award did feel a little different. I can't build anything on top of OpenSSL in quite the same way that I can take the signal protocol and build on it. (All the other winners did something that's useful to rust, too. :))