[openssl-project] Simplifying the security policy

[Salz, Rich]

I like your changes, except that I was  confused by the multiple references to “timing channel” attacks and had a hard time telling which is which, and why.