[fpc-pascal] Re: HMAC_SHA1 and FPC

[Reinier Olislagers]

On 2-4-2013 5:13, Noah Silva wrote:
> Actually I think on OS X and Linux it makes sense to depend on OpenSSL,
> but not for the reasons you mentioned so much as one more: Security. 

That's probably why the previous poster wrote robust etc. Sounds like
security attributes to me.

> If
> you are using doing encryption, then it's better to use a library that
> is updated more often for bug fixes, and to have the updates be applied
> to your program automatically.  If you static-link it in, it will never
> be updated until you update it and ship a new version of your program
> and everyone installs it.  If you dynamically link to it, then then the
> operating system updates it, you get the updates "for free".  


If you feel so strongly about it, why not submit a patch that uses
OpenSSL on platforms that are sure to have it and use Silvio's native
code for others?