On Thu, 2019-06-20 at 16:46 +0200, Laszlo Ersek wrote:
> > Please submit a PR to OpenSSL to add 'no-store' if you really don't
> > want it.
> 
> I actually agree about "no-store"; please see point (1) in my earlier
> review here:
> 
> http://mid.mail-archive.com/0c5b5e95-cb2c-75af-a30b-015dac14b91c@redhat.com

Hm, you told them to use no-store, and I think you were right. They
seem to have refused purely because of the piffling detail that it
didn't actually exist. I find this suboptimal. Here:

https://github.com/openssl/openssl/pull/9206