3 ms·
I'll play devil's advocate with the hope that it facilitates a response by someone who understands the topic far better than me: what is security?
by pizza 5y ago
I'll play devil's advocate with the hope that it facilitates a response by someone who understands the topic far better than me: what is security?
- grumpyprole 5y agoOne example of security is not munging strings together and shipping it off to the database or some other "eval" with full privileges. A programming language with lightweight static types makes it easier to parse outside data into a typed representation, then transform/evaluate/compile as necessary. This is of course Haskell's bread and butter.
- icrbow 4y agoSecurity is resilience with respect to your threat model. The usual security objectives are confidentiality, integrity, and availability. Nothing is "secure" forever and ever. For each objective you need to state some assumptions that are required to uphold it. Haskell allows you to express more assumptions in code, not just comments, to be enforced at compile time. And with some careful handling Haskell types provide a solid foundation without going into full deductive verification mode.