Is this a good idea? Apparently, they have their own fixes they reapply after every #OpenSSL patch. I don't know why those don't go back upstream but it was enough they created their own fork called #BoringSSL (and frankly that name is boring).
Is it smart to have more implementation?
Is it smart to have more implementation?
Google unveils independent “fork” of OpenSSL called “BoringSSL”
Stripped down package means there will be three independent versions of OpenSSL.