Re:Freenginx: Core Nginx developer announces fork
by ironmagma on Wednesday February 14, 2024 @03:31PM
(#39374895)
Certainly the web can mostly coast indefinitely. There are webpages from decades ago that still function fine, even that use JavaScript. The web is an incredibly stable platform all things considered. In contrast, it's hard to get a program that links to a version of Zlib from 10 years ago running on a modern Linux box.
[ Parent
| on HN ]
Re:Freenginx: Core Nginx developer announces fork
by 5- on Wednesday February 14, 2024 @04:50PM
(#39376021)
this problem -- great forward compatibility of the web -- has been taken care of with application layer encryption, deceitfully called "transport layer" security (tls)
Re:Freenginx: Core Nginx developer announces fork
by quickthrower2 on Wednesday February 14, 2024 @03:36PM
(#39374955)
The web is the calm looking duck that is paddling frantically. You want to be using SSL from the 90s, or IE vs. Netscape as your choice etc. Nostalgia aside!
Re:Freenginx: Core Nginx developer announces fork
by KronisLV on Wednesday February 14, 2024 @06:03PM
(#39376820)
> Certainly the web can mostly coast indefinitely.
I'm not sure about that, for anything besides static resources, given the rate at which various vulnerabilities are found at and how large automated attacks can be, unless you want an up to date WAF in front of everything to be a pre-requisite.
Well, either that or using mTLS or other methods of only letting trusted parties access your resources (which I do for a lot of my homelab), but that's not the most scalable approach.
Back end code does tend to rot a lot, for example, like log4shell showed. Everything was okay one moment and then BOOM, RCEs all over the place the next. I'm all for proven solutions, but I can't exactly escape needing to do everything from OS updates, to language runtime and library updates.