Today, I've read an article in the New York Times, entitled Heartbleed Highlights a Contradiction in the Web:
Five years ago, Steve Marquess, then a technology consultant for the Defense Department, was struck by the contradiction that OpenSSL was "ubiquitous," yet no one working on the code was making any money. When he met Dr. Henson, Mr. Marquess said, Dr. Henson was working on OpenSSL code full time and "starving."
So Mr. Marquess started the OpenSSL Software Foundation to help programmers like Dr. Henson make money by consulting for government agencies and companies that were using the code. It also takes in some minimal donations, he said.
Over the last five years, the foundation has never made more than $1 million in commercial contracting revenue a year. This does not go very far in paying for the programmers’ work, Mr. Marquess said.