LibreSSL is a fork of OpenSSL by the OpenBSD team following Heartbleed. It improves security a lot from the original OpenSSL library and I think it should be used instead.
OpenBSD has a great track record of security and especially with crypto (see e.g. OpenSSH).
Some Linux distros are using LibreSSL by default already such as Void and Hyperbola.
It’s not yet available in Debian. There was an RFP but no progress was made.
I think we should package this ourselves and make it conflict with the OpenSSL package (so applications use it by default rather than needing to be re-built). Releases are available here https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/
Examples of what the packaging would be are https://github.com/radhus/debian-libressl and https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=libressl-git
Having LibreSSL used by default would make it far less likely for there to be critical vulnerabilities in the TLS implementation such as Heartbleed.