Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
A role model for security. Almost.
Jason Miller, 2005-06-08

Mark Burnett beat me to it. I was planning to write an article on the relationship between good security and paranoia in the not too distant future. However, it appears that at least one other SecurityFocus columnist shares some of my theories on good security. Either that, or he's somehow capable of reading my mind. Paranoia is generally a good thing to have. Regardless, Mark's article got me wondering about what other traits are valuable in the quest for good security.

Comments Mode:
A Role Model for Security. Almost. 2005-06-09
Anonymous (1 replies)
Re: A Role Model for Security. Almost. 2005-06-29
Matthew Murphy
Yes. The failures of Postfix have been far more visible. Bernstein has also carefully pointed each of them out, in his typical antagonistic style, illustrating why, he believes, that makes qmail better.

Security claims like those made by both Postfix and qmail are historically horrid ideas. They tend to focus the energy of development teams on making their code appear squeaky clean than the actual security of the code. This all comes down to one fact: it makes no sense to guarantee the unachievable. Bernstein is in no position to guarantee that his code is secure, anymore than IBM was in position to market Postfix as "solving" the security problems of current SMTP solutions.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/331/32103#32103
A Role Model for Security. Almost. 2005-06-11
xeon (1 replies)
Re: A Role Model for Security. Almost. 2005-06-29
Matthew Murphy (1 replies)
A Role Model for Security. Almost. 2005-06-11
Anonymous (1 replies)
Re: A Role Model for Security. Almost. 2005-06-29
Matthew Murphy
A Role Model for Security. Almost. 2005-06-15
Russell Nelson (1 replies)
Re: A Role Model for Security. Almost. 2005-06-29
Matthew Murphy







 

Privacy Statement
Copyright 2009, SecurityFocus