Great work OpenSSL devs! It's really exciting that they finally fixed the license so it doesn't have an advertising clause, and pages upon pages of custom license content. Now it's just plain and simple Apache 2.0.

Looks like they are trying to make the transition smooth and didn't introduce too many breaking changes, even though it is a major version change.

I wonder why they didn't take the opportunity to make the APIs much safer to use? For example "modern" C11 has some constructs that could be used to make code safer and easier to work with. We don't have to target C89 in 2021.

Does it ready for HTTP/3?