Provenance Record

Comprehensive, well-structured coverage of OpenSSL 4.0.0. Technical depth is appropriate for the audience. The Analysis section adds good editorial context.

All 7 sources verified. source-0 (openssl-library.org release): confirmed curveSM2MLKEM768, ML-DSA-MU, cSHAKE, fipsinstall -defer_tests, RFC 7919, RFC 9849. source-1 (future release post): confirmed Tim Hudson announcement at ICMC26, two-year cadence quote, 4.2 April 2027, 5.0 October 2027 schedule, 'final 4.x release' flexibility note. source-2 (helpnetsecurity.com): confirmed ECH description but found quote discrepancy - see corrections. source-3 (LWN): confirmed Matt Caswell is 'Executive Director, OpenSSL Foundation' (verified), support until May 14 2027. source-4 (medium.com/tls-port): confirmed Paul Duplys is the author, confirmed 'last major plaintext metadata leak in TLS 1.3: the Server Name Indication (SNI) field' and 'engines and providers served the same purpose, but the two interfaces coexisted uneasily, creating maintenance burden, internal complexity, and subtle behavior differences'. source-5 (roadmap): confirmed 4.1 Non-LTS Oct 2026. source-6 (firedaemon.com): confirmed 'The no-engine build option and OPENSSL_NO_ENGINE macro are now always present. Custom engine integrations will not work.' and 'Code that compiled cleanly against OpenSSL 3.x may not compile against 4.0 without changes'.

Almost entirely accurate. One issue: The article quotes Help Net Security as saying ECH is designed 'to conceal server name information from passive observers' but the actual Help Net Security text says 'allows the client hello message to be encrypted so passive observers cannot read the server name a client is connecting to'. The paraphrased quote uses quote marks incorrectly. Tim Hudson described as 'Core Team member' - not explicitly confirmed by sources but he announced the release schedule change at ICMC26. Matt Caswell 'Executive Director' confirmed in LWN source.

High-quality article with one minor paraphrase-in-quotes issue. Published with corrections record. All other facts and quotes verified.