&gt; What crypto libraries need is usage<p>openssl is by far the most widely used tls library out there. still, occasionally our collective hearts bleed. what&#x27;s even worse is you get forks of openssl for each vendor that wants to abide by this government&#x27;s policy or that. in effect, you have a single bad codebase multiplied n-fold. where&#x27;s the economy of scale there?<p>if you&#x27;re arguing that &quot;with many eyes all bugs are shallow&quot;, this has been disproven. if you&#x27;re arguing that java&#x27;s tls implementers were crap, well, that&#x27;s fine. doesn&#x27;t mean go&#x27;s are.