3 ms·
Not that it matters. OpenSSL was already 15 years old when Heartbleed was discovered, and the horrible code that caused it remained unnoticed for two years. The
by p-e-w 3y ago
Not that it matters. OpenSSL was already 15 years old when Heartbleed was discovered, and the horrible code that caused it remained unnoticed for two years. The idea that software maturity and "enough eyes" can overcome the glaring problems from using memory-unsafe programming languages is a fantasy.
- anuraaga 3y agoI believe the point is that this is http/3 support added to the nghttp2 library which has been around for a long time, longer than Rust's mainstream popularity started to build. While I haven't used it personally I have heard good things about the library it's good to see it continue. Dismissing a new feature in an existing library seems quite excessive and possibly zealous. Or perhaps we should just stop using OSes entirely because they continue to release new features in memory unsafe languages.