News for hackers. Stuff that matters.

A comment on Nginx just became the most used web server among the top 1000 websites. Parent comment

Re:Nginx just became the most used web server among the top ... by mortehu on Wednesday July 03, 2013 @09:29PM (#5988658)
> I'd look at moving away from PHP more urgently than moving away from Apache, if only because of their respective security records.

In my opinion, this is like moving away from C due to its security record.

[ Parent | on HN ]
Re:Nginx just became the most used web server among the top ... by lmm on Thursday July 04, 2013 @02:43AM (#5989464)
What, a good idea?
[ Parent | on HN ]
Re:Nginx just became the most used web server among the top ... by mortehu on Thursday July 04, 2013 @05:18AM (#5989844)
Well, you did also say "If it ain't broke don't fix it", so we might be agreeing. You wouldn't want any new programming language to roll its own SSL library rather than using OpenSSL or GnuTLS, would you?
[ Parent | on HN ]
Re:Nginx just became the most used web server among the top ... by lmm on Thursday July 04, 2013 @06:30AM (#5990007)
I wouldn't want a project to write its own SSL library no, but I would not start a new project in C, and if I had an existing C codebase I would seriously think about migrating it to a safer language (unless it needed particular C features. Crypto code does, because it needs to resist timing attacks, but that's a very rare case).
[ Parent | on HN ]