OpenSSL after Heartbleed

i'm not sure that your comment is relevant to a discussion about OpenSSL either, but it seems that there're indeed new things to learn for you at least, so my comment was worth it ;). e.g., your statement:

> [...]increasing their manpower from two consultants to fifteen[...]

misses the point as the article says this earlier:

> Before April 2014, OpenSSL had two primary developers, both of whom were volunteers[...]

i.e., those two volunteer developers became full time developers which was later flat our ruled out for me, i wasn't even given the chance to discuss conditions.