I still maintain that tested code is better than untested code, and nothing tsts it more than time. The OpenSSL code worked well for a long time until a very subtle error crept in. So the question is whether we will more quickly get to a more secure state by developing a mature code base or by throwing it out and starting over. In general, I maintain that fixing the mature code is a better practice.

Second, announcing almost immediately that that you have thrown out 90,000 lines of code (the number I recall) does not tom e suggest careful thought so much as a hack-and-slash mentality, and I don't like that in security. Calm deliberation usually works better.

Third, from the reports I read one of the things that was discarded as an unnecessary feature was Windows compatibility. Even though I support free software, I recognize that we need to share the Internet with a shit-ton of Windows machines, and I would prefer that they be as secure as possible.

I totally agree on Mono culture, and I hope that LibreSSL provides good competition. I did not mean to imply that LibreSSL should not exist, only that Iwould be very cautious about adopting anything unproven.