“In a typical year the OpenSSL project receives about US $2000 in donations”
Soo, throwing a little bit of economics out there: BSD-licensed open source software is pretty much a Public Good (http://en.wikipedia.org/wiki/Public_good). There are basically two ways we've figured out how to create public goods: taxation and assurance contracts (like Kickstarter).Thoughts on the pros and cons of either approach with respect to improving information security infrastructure?