[OpenSSL Conference] Distributions Community Panel — help shape the questions

Hi Distributions community,

On Wednesday, October 14, the OpenSSL Conference in Prague has a Community panel: Distributions scheduled on the main program. I'll be moderating. It's a chance to put questions directly to everyone here participating in this community.

Reply here with a question or topic for the panel and I'll make sure it gets raised. It doesn't need to be polished. Some starters:

• Time to merge: Where are the bottlenecks in the review pipeline, and how do we balance private and upstream development interests?

• FIPS certification: How can upstream, distributions and vendors share the burden? Can every downstream FIPS patch be upstreamed?

• Versions 3 and 4 side by side: What does upstream need to change so parallel installs stop hurting, with 5.0 on the way?

• Downstream patches: What do you carry that upstream should see, and what stops you from sending it?

• Trust stores: What should dynamic trust stores get right from day one?

• Having a voice: Recent polls here drew 8–9 voters out of about 40. How should decisions that affect every distribution be made?

DM message me directly if you'd rather not post publicly.

p.s. Interested to participate on the panel during the conference? We are still looking for at least one additional participant, DM me if interested.