Sponsored link
Serve your customers, not your servers, with VERIO Linux VPS. Full-access test-drive here.
| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
The lighttpd Web Server (O'ReillyNet)
The lighttpd Web Server (O'ReillyNet)
Posted Apr 6, 2007 15:58 UTC (Fri) by job (subscriber, #670)Parent article: The lighttpd Web Server (O'ReillyNet)
I wish I could feel better about lighttpd's security. The only published security hole was a bit sloppy, and it isn't obvious if the design takes security seriously (compared to, say, Postfix or Dovecot which has clear compartments and it's obvious where all the validation goes).
The web server is a very sensitive piece of equipment and the enormous code dump that is Apache always left me a bit uneasy, but at least it's in very common use and pretty throughly tested.
(Log in to post comments)