If you want no CVEs you could use my web server filed[0]. It's really fast. And written in C. ;-)
Of course, it doesn't support HTTPS or HTTP/2, so... there's that.
Re:Why is the Internet so Slow?
by icebraining on Friday June 23, 2017 @10:58AM
(#14619646)
Ah, the old concept of binary security - either you want it or not. It doesn't work like that, security is one need to be balanced against others.
Also, lots of CVEs indicate only one thing: that lots of people are checking it.
> Also, lots of CVEs indicate only one thing: that lots of people are checking it.
Also that it has lots of vulnerabilities.
Instead, you could use a product that's secure by design.
Hrmn.
Doesn't it also mean they're finding lots of problems with it?
Re:Why is the Internet so Slow?
by throwaway135634 on Friday June 23, 2017 @06:28PM
(#14623239)
Key word "finding". Most large software has plenty of bugs, CVE's just tell you how many they're aware of
Why would you use nginx for security? I see over 100 CVEs for nginx.
This isn't exactly unexpected. Nginx is an incredibly complicated piece of software written for performance in C. That's basically the trifecta of security badness.
If you want security, why not use a (possibly slower) simpler product written in a safer language?