&gt;<i>No amount of static linking of Chrome would magically upgrade the SSL version being used to package Debian, for example.</i><p>No, but if Debian packages had statically compiled OpenSSL you could just update say Nginx and get it working with the new protocol Chrome requires, while 100+ packages could still be left as is and use their own, older, version of the lib.