“In a typical year the OpenSSL project receives about US $2000 in donations”
Soo, throwing a little bit of economics out there: BSD-licensed open source software is pretty much a Public Good (<a href="http://en.wikipedia.org/wiki/Public_good" rel="nofollow">http://en.wikipedia.org/wiki/Public_good</a>). There are basically two ways we've figured out how to create public goods: taxation and assurance contracts (like Kickstarter).<p>Thoughts on the pros and cons of either approach with respect to improving information security infrastructure?