[Ach] meta-question on algorithm agility

[ianG]

Question for the assembled, on the experiences of the group so far:

What proportion of effort has been spent on the question of
configuration strings that set the algorithm possibilities?  E.g., the
famous OpenSSL blah:blah:blah string.

I'm looking here for a sense of 10% or half or most or 90%, etc.
Measured by hours consumed, pages consumed, posts consumed, biers
consumed...

Imagine that algorithm agility was banned.  No more choice!  How much
resource would this free up?



iang

ps; nice resource:
https://lists.fedoraproject.org/pipermail/security/2014-April/001810.html