OpenSSL Communities
Thu 28 Aug 2025 2:46PM

Meeting Minutes: Board and BAC Monthly (2025-08-25)

KM Katerina Micova Public Seen by 84

Below are the minutes from the recent BAC and Board of Directors meeting. All members receiving this notification are encouraged to review the minutes and actively participate in the discussion. That’s one of the opportunities to engage directly with BAC members by replying in the thread below. Your input helps us ensure the OpenSSL community remains transparent, collaborative, and responsive to your needs.

Attendees

@Anton Arapov, @James Bourne, @Jaroslav Reznik, @Jeff Johnson, @Katerina Micova, @Paul Dale, @Randall Becker, @Tim Hudson
Absent: @Billy Brumley

Agenda

  1. SSLv3 removal for OpenSSL 3.6

  2. AI policy discussion and guidelines

  3. cURL deprecation of TLS 1.0/1.1

  4. BAC term extension proposal

  5. OpenSSL office opening recap

  6. Planning the “Friends of OpenSSL” November event

  7. Community polling on API and engine deprecation

  8. General updates and coordination

Key Points

  • Work on the removal of SSLv3 in OpenSSL 3.6 was carried out through BAC members engaging with their respective communities. A consensus vote was then held on openssl-communities, initiated by Paul. Randall reported the result of this process, which confirmed unanimous support. The proposal passed, and the removal of SSLv3 was formally advised to the Board. The Board supported the decision.

  • James led a conversation on the use and implications of AI-generated code and documentation in OpenSSL. The group agreed on the need for clear guidance rather than licensing changes at this stage. James and Jeff will gather broader feedback through community polling.

  • Concerns were raised about cURL’s plan to deprecate TLS 1.0/1.1 without significant notice. Randall will follow up with cURL’s maintainers and draft a communication to the OpenSSL user base.

  • Anton proposed extending current BAC terms until April to align elections with TAC and reduce disruption during the conference season. Initial feedback was positive.

  • Anton presented a recap of the Grand Opening of the Brno office, including photos and event details. The space features recycled materials. Presentation will be shared.

  • Jeff provided an update on the November 18th event in North Carolina. The event will feature talks, Q&As, and a community dinner with support from Cisco, AWS, and NetApp.

  • Jeff reported on recent polling around engine deprecation. A phased approach was supported by the community, with formal documentation to follow.

  • Members confirmed the September 22nd coordination call.

Community and Technical Engagement

  • BAC is pursuing community-driven policy development for topics like AI code generation.

  • Communications regarding external changes (e.g., cURL protocol support) must be proactive and clearly broadcast across the OpenSSL Corporation channels.

  • Emphasis was placed on stronger connections between the OpenSSL Corporation and OpenSSL Foundation-led groups.

Future Releases and Transition Planning

  • SSLv3 removal aligns with OpenSSL 3.6.

  • API deprecation and engine removals continue to be evaluated in line with community consensus and OpenSSL 4.0 roadmap.

  • The group highlighted the need to maintain compatibility while encouraging modernization.

Upcoming Actions

  • The next BAC monthly meeting will be held on September 22nd, prior to the OpenSSL Conference.

  • Consensus items and polling results will guide final decisions on SSLv3, AI policy, and event planning.

  • A push is underway to coordinate election cycles across BAC and TAC for long-term continuity.

Future Meetings and Events

  • September 22, 2025: Monthly meeting as a coordination call before the OpenSSL Conference.

  • October 2 and 3, 2025: BAC and TAC face-to-face meeting in Brno.

  • October 7 to 9, 2025: OpenSSL Conference in Prague.

  • November 18, 2025: “Friends of OpenSSL” Community Event (North Carolina).

  • Planning is ongoing for future webinars and focused community feedback sessions.

Action Items

Randall, Paul, Jeff → Draft formal SSLv3 removal statement and submit to Corporation Board via Corporation BAC Loomio

James → Coordinate polling and feedback on AI policy with the community

Jeff → Share AI policy polling results with Large Business Community

Randall → Communicate TLS deprecation impact; contact cURL, and draft community notice.

Katerina → Send the Brno office event presentation to all BAC members.

Jeff → Plan “Friends of OpenSSL” event logistics, scheduled for November 18th, coordinate with Anton and Neil.

Jeff, Paul → Draft API deprecation consensus summary, for internal use and roadmap alignment

All BAC Members → Collect feedback on BAC term extension.