It has improved significantly since the early days of 3.0. Not back to 1.1.1 levels of performance, but enough that it's probably not a dealbreaker for most people.

Still a shame that it went backwards.

AWS-Lc looks very promising replacement for OpenSSL these days.

>We do not fully understand the motivations that led to the public APIs and internal complexity we’ve described here. We’ve done our best to reverse engineer them by asking “what would motivate someone to do this” and often we’ve found ourselves coming up short.

Surely they thought of it but didn't say it out loud... to keep it exploitable, maybe?

[flagged]