So, hopefully some OpenSSL developers will apply?

zanny · on April 24, 2014

Hopefully not. The heartbleed debacle is going to see that project showered with money and corporate aid. We need to see projects that have absolutely no support but are critical (a lot of the GNU utils are good examples). nginx could probably use some of this goodwill, as can core language compilers, and frameworks like Qt. Albeit Qt is probably a bad example, because you have to sign copyright over to Digia. KDE5 is supposed to be very library portable, it seems like a good place to put Qt extensions businesses are uncomfortable turning over to Digia.

opendais · on April 24, 2014

I think Nginx is good with http://nginx.com/ and their Nginx Plus + Support Contracts model.

I'd like to see OpenSSH on this list simply because it is probably as widely used as OpenSSL and I don't think it has better funding...I could be wrong tho.

scolson · on April 24, 2014

OpenSSH originates from the OpenBSD developers. While the OpenBSD foundation could always use more money, they are no where near as bad off as the OpenSSL team was/is.

CHY872 · on April 24, 2014

Really? I seem to remember them nearly having to shut down their servers a few months back?

elbear · on April 25, 2014

I don't have a link to give you, but recently they have received good funding.

opendais · on April 25, 2014

Fair enough. However, I think someone volunteering from outside the organization to do a security audit wouldn't hurt given how widespread it is. :)