jodiscr

can't evaluate > not enough funds to evaluate

In other words, with proprietary sw, at least SOMEBODY evaluated it and placed their seal/name on it. With open source, you are relying on a hope that somebody out there somewhere does it. And in various cases, we've seen how that turned out.

yes, but I'm talking about RNG from likes of Microsoft or Apple...

Given things like the Debian OpenSSL fiasco and Heartbleed, can we honestly put as much faith into open source crypto as it's well-funded proprietary counterparts?

I honestly prefer open source and recognize the problem the author points out as clearly significant problem - as well as the benefits of LibreSSL, but I'm just not convinced there are enough eyeballs looking at open source crypto.

> Otherwise it feels like some of that autogenerated SEO-style spam, which Google should penalize.

I assumed Google already recognized these near-duplicates and are penalizing them

I ain't switching from Perl 5.8 to golang until a shared hosting provider becomes available.