Feedback/questions about BAC minutes
How to reply/respond to minutes
@Michael Richardson Agreed you should be able to respond, this is an important bottleneck to resolve. Part of the discussion in those minutes also is us attempting to address this; keep the feedback coming. This topic is very much alive in my eyes.
[my substantive clarifying question is about what exactly a "static FIPS provider" means. I suspect that it is one that I compile into libssl, rather than dlopen(3). I regularly build experimental versions of openssl as static .a files in order to be sure which code my enclosing library [ruby-openssl for instance] is using.]
@Michael Richardson Yeah, a notion of a static FIPS provider just opens a big can of worms.
@mcr, a static FIPS provider.... yeah, that takes me back to the old FIPS module for 1.0.x, which was essentially a drop in libcrypto replacement, still a shared object / DLL.
The FIPS boundary is very difficult to define in a purely static build. When the FIPS module is its own separate dynamic plugin, that delineation is clear cut.
I received/read the email from Chris Ward. At the very bottom of the email, there is a link:
As far as I can see, that page isn't something I can reply to, nor do I see an obvious way to ask clarifying questions. I think that this is really the core of much of the frustration around communication.