Companies That Use Haskell in Production

Re:Companies That Use Haskell in Production by whateveracct on Tuesday May 03, 2022 @09:46AM (#31248238)

Security in Haskell isn't especially better than any other general purpose language. You do have a lot more tools to help though. For instance, you can make your web app fail to compile if you accidentally try to serialize sensitive information to JSON or plaintext. GHC will tell you exactly where you almost had a data leak.

[ Parent | on HN ]

Re:Companies That Use Haskell in Production by bcrosby95 on Tuesday May 03, 2022 @11:52AM (#31249807)

It's actually a bit harder than you're implying, because any request coming to the server could have sensitive information in it.

But, yes, wrapping your data helps solve some of the problem in any language. For instance, in Java we hold passwords from requests with a Password class rather than with a String class, whose .toString will return "xx" rather than the actual password.

[ Parent | on HN ]

Re:Companies That Use Haskell in Production by grumpyprole on Tuesday May 03, 2022 @12:49PM (#31250508)

I was asking about IHP specifically. Yes Haskell is just a tool and one could simply build PHP with it.

[ Parent | on HN ]