Why You Should Use LibreSSL Instead of OpenSSL

In this video I explain why you should use LibreSSL instead of OpenSSL

Really its as simple as comparing the list of vulnerabilities to OpenSSL vs LibreSSL

₿💰💵💲Help Support the Channel by Donating Crypto💲💵💰₿

Bitcoin
3MMKHXPQrGHEsmdHaAGD59FWhKFGeUsAxV

Ethereum
0xeA4DA3F9BAb091Eb86921CA6E41712438f4E5079

Litecoin
MBfrxLJMuw26hbVi2MjCVDFkkExz8rYvUF

Dash
Xh9PXPEy5RoLJgFDGYCDjrbXdjshMaYerz

Zcash
t1aWtU5SBpxuUWBSwDKy4gTkT2T1ZwtFvrr

Chainlink
0x0f7f21D267d2C9dbae17fd8c20012eFEA3678F14

Bitcoin Cash
qz2st00dtu9e79zrq5wshsgaxsjw299n7c69th8ryp

Etherum Classic
0xeA641e59913960f578ad39A6B4d02051A5556BfC

USD Coin
0x0B045f743A693b225630862a3464B52fefE79FdB

and be sure to click that notification bell so you know when new videos are released.

[anon-wemh]

everytime i see the way the camera is stretched i love more this black man

[NuclearFury]

LibreSSL wasn't affected by heartbleed because it didn't exist back then. It was forked from OpenSSL *because* of heartbleed.

[blenderpanzi]

4:36 LibreSSL wasn't vulnerable to heartbleed because it didn't exist back then! Creation of LibreSSL was a reaction to heartbleed.

Wikipedia: Following Heartbleed's disclosure, members of the OpenBSD project forked OpenSSL into LibreSSL.

[mansourq]

I love the contents of your videos, Thank you so much bro and keep up ...THUMBS up

[soimless]

The biggest problem facing LibreSSL adoption is the stated goals of the project are actively hostile to the goals of the major Linux distros.

With the OpenBSD folks being primarily Canadian they had no trouble pulling out the FIPS 140-2 compliant code and they don't want it back in ever. I agree that the FIPS 140-2 code is crap, but FIPS 140-2 is a requirement if you want your application to be used by the US government, financial institutions or health care. Those industries are the bread and butter of Red Hat. They aren't going to waste a ton of resources to get LibreSSL FIPS certified and working in Fedora just to have those changes ignored in the upstream.

If you read the Debian mailing lists, a lot of the maintainers there are curious, but in the end don't see the point because there things like GNU TLS and NSS which are both much more mature. Plus the stable release cycle is just too short for projects like Debian. The stable release support for LibreSSL is only one year, meaning by the time it makes it into Debian stable they won't have a stable releases to pull bug fixes from and the Debian maintainers are on their own.

Where LibreSSL fits the most is in OpenBSD, and smaller minimal Linux distros like Alpine. It's a good thing to have more than one TLS / general crypto library out there. I think it will stick around because of the extreme paranoia of the OpenBSD folk. I also get the feeling that LibreSSL is a stop gap until the OpenBSD project doesn't feels like it doesn't need a OpenSSL drop-in anymore.

[sachahjkl]

The video format of your webcam feed is stretched on the x axis

[arrtemfly]

as we can see from the camera footage in a regular video focused on the stuff that's on the monitor, the guy is actually wide irl. mad respects.

[notahero]

I like the setup showing your face in the video. Keep up the great work.

[spicynoodle]

non-network encryption like password managers etc usually also relies on the algorithms in Open/LibreSSL so it's not only about the browser ^^

[ObeseWizard]

You have such a nice voice, I could sleep to you reading a book lol

[Echomemes]

LibreSSL is one of the (many) good reasons to use Void Linux

[ItsKingMyles]

i wish they would merge the differences into a single ssl package. I found that libressl isn't is an exact drop in for openssl library without something breaking (experience on void linux)

[xxISHOWTiiMExx]

well explained, as always. thanks for all of the great content!

[gabrielwilliams]

I thought you were white based on your voice; well done for mastering the boring nerd monotone we all know and love!

[Sharp]

Meanwhile Gentoo will drop LibreSSL support.

[regenjacob]

Sadly Gentoo doesn't official support libressl anymore :c

[Jorge-xfgs]

Did you do this video because you found Firefox doesn't work with LibreSSL now and you had to switch to Brave? Because you've only made videos about Firefox and Ungoogled Chromium as far as I know and you mentioned the Firefox thing in the end.

[ackz]

you should try MesaLink though, it replaces both of these, it's both faster and safer

[kyu]

Well the problem with LibreSSL is, that dotnet cannot be compiled against it, hence its not usable for me. It is also the only reason why I am not using void linux yet :/

[JoseEduardo-dgki]

It would be nice if you did a "migration" video for binary based distros... not finding much documentation about it