zlacker

So can we expect popular yet understaffed open source software -- like OpenSSL -- to get a lot of paid code review or patches?

>>curt15+(OP)
expect new, certified companies with security and finance, to become the officially required caretakers along with many fees; expect new monetized systems to distribute security patches passed through new bureaucracies, with logging of the government ID of all recipients; expect the restriction of new security patches to authorized users only.