Re:Developers fix multitude of vulnerabilities in Apache HTT...
by mholt on Friday September 24, 2021 @03:16PM
(#28646659)
Yeah; and unlike nginx and Apache, Caddy has a higher degree of memory safety, so it's impervious to a whole class of vulnerabilities.
[ Parent
| on HN ]
Re:Developers fix multitude of vulnerabilities in Apache HTT...
by throw_m239339 on Friday September 24, 2021 @04:07PM
(#28647210)
> Yeah; and unlike nginx and Apache, Caddy has a higher degree of memory safety, so it's impervious to a whole class of vulnerabilities.
At the expense of the memory footprint because developed with Go. Hi Caddy creator!
Re:Developers fix multitude of vulnerabilities in Apache HTT...
by eric_h on Friday September 24, 2021 @05:26PM
(#28648040)
> At the expense of the memory footprint because developed with Go. Hi Caddy creator!
Makes sense to me that something built in a language with more memory safety than C would use more memory, but is it really significant in practice? I use go every day and memory usage has not been a significant issue for many applications.
Re:Developers fix multitude of vulnerabilities in Apache HTT...
by arp242 on Saturday September 25, 2021 @02:42AM
(#28651025)
I don't use Caddy, but I've written plenty of Go apps (which usually implement their own HTTP server with net/http) with plenty of users, and memory usage has never been much of a concern.
There are other performance concerns of course, e.g. GC latencies, and at times the GC may bite you. See e.g. the "taming Go memory usage" story from a few days ago[1], but this usually isn't a huge concern for many use cases.
Re:Developers fix multitude of vulnerabilities in Apache HTT...
by whateveracct on Saturday September 25, 2021 @12:31AM
(#28650557)
We're talking about shaving megs here rofl
cmon now
terminal systems engineer brain is everywhere
Re:Developers fix multitude of vulnerabilities in Apache HTT...
by SahAssar on Friday September 24, 2021 @04:32PM
(#28647450)
Might be nice to disclose your involvement when commenting on caddy-related threads.
Re:Developers fix multitude of vulnerabilities in Apache HTT...
by mholt on Friday September 24, 2021 @04:40PM
(#28647535)
> I'm the author of the Caddy web server.
Re:Developers fix multitude of vulnerabilities in Apache HTT...
by SahAssar on Friday September 24, 2021 @05:05PM
(#28647804)
I'm guessing you mean the about section of your profile. I'm just saying that it's nice to make that more visible when you have that sort of involvement in the topic and it is not obvious.
Re:Developers fix multitude of vulnerabilities in Apache HTT...
by 0des on Saturday September 25, 2021 @12:38AM
(#28650585)
Why? I prefer when people don't flash their badge at me to support their statements. Words should stand on their own without appeals to authority.
Re:Developers fix multitude of vulnerabilities in Apache HTT...
by SahAssar on Saturday September 25, 2021 @03:57AM
(#28651375)
It's more the other way around, when saying things about your own product it's nice to disclose your involvement since that definitely colors your view. Especially in cases like this where it's hyping the product.
Re:Developers fix multitude of vulnerabilities in Apache HTT...
by klaussilveira on Friday September 24, 2021 @05:00PM
(#28647750)
Definitely not the right place, but thank you for creating Caddy. :)