-
Having a Rust TLS impl. is an excellent first step (initial point of contact for an HTTP(2) server), and I'd love @nginx to think about similar steps. Watching github.com/icing/mod_tls for releases now and will try as soon as a stable one hits, but it *is* only a first step. @alex_murray/1356842607494660097
-
@nginx Comparing httpd.apache.org/security/vulnerabilities_24.html and nginx.org/en/security_advisories.html, @nginx still comes out pretty well (and I use it myself partially for this reason), but on first sight a significant number of (medium or higher) vulnerabilities have been (unsurprisingly) memory issues.