Is std.http insecure?

I think if a project wants to make such claims, it should link to open issues.

I don’t know when this text was created, but here’s a brief timeline of std.http:

  1. Initial version of some random http APIs contributed
  2. I deleted most of it because I didn’t like it
  3. Initial version of http.Client and http.Server contributed
  4. I didn’t like either one. I rewrote Server but didn’t have time to rewrite Client yet
  5. Now I am rewriting all of std.http

Once I’m done, I’ll be happy to take responsibility for the performance and production-readiness of this code.

13 Likes