Httpd was an absolute disaster from a security standpoint in the 90s, as was everything. Modsecurity didn’t even come out until 2002. Comparing nginx (released

Httpd was an absolute disaster from a security standpoint in the 90s, as was everything. Modsecurity didn’t even come out until 2002. Comparing nginx (released in 2004) is apples and oranges to say the least. OpenSSL or log4j would like a word about how shallow bugs are in popular software.