[tedunangst]

https://www.openssl.org/about/secpolicy.html

[qrmn]

A policy which unfortunately lumps DoS in with remote code execution as both "high". They're both significant, but one's clearly going to give us all a much worse day than the other, so we're all still left to wonder - how bad is this one?