Well, you're asking some very good Questions !
Although I don't know answers to them...I wasn't aware that OpenSSH keys may
be broken,
but then Jacob Applebaum is somebody I would trust.
As to Theo de Raadt not providing the results of an independent review - that
really
does surprise me and makes me curious as to why ? I will see what I can
find...
LibertyBSD is still moving forward: http://www.libertybsd.net/ and
'alimiracle' from
the Trisquel Forums seems to be doing a lot of work on the ports tree !
Haven't tried it though, however they give some very interesting reasons as
to why
OpenBSD may not be as transparent:(quote) "OpenBSD ships with several pieces
of non-free, binary only firmware in the base system, and depending on the
hardware detected, by default a script will download more at first boot,
without informing the user of this."(end quote).
Also just found this concerning OpenSSL:
http://www.theregister.co.uk/2015/07/06/awoogah_get_ready_to_patch_severe_bug_in_openssl_this_thursday/
Someone has already "complained" that this severe Bug does not have a name or
logo like heartbleed :)
