On Wed, 2011-08-10 at 20:30 +0930, Tim wrote: > On Wed, 2011-08-10 at 11:10 +0200, J.Witvliet@xxxxxxxxx wrote: > > Specially with any package that is somehow related to security it > > would be comforting to be assured that at least some people take the > > trouble to have a look at it. The fact that without any changes it > > still works after all these years would not be enough for something > > like a CA. > > Obvious question: Have there been any bug reports for it, or no real > complaints? (I mean faults, not reports about lack of new versions.) Obvious answer: if there haven't been, does that mean that there are no bugs or that not enough people are testing it? Testing security software is not for the faint of heart and very often the failure mode is to look like everything is working when in fact it's leaking information. And if there were bugs, who would fix them? poc -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines