This is your reminder that people with ample credentials in one sub-field can be and often are incompetent, or at least woefully out of date, in others. Don't let world-class cryptographers write your secure email server.https://twitter.com/comex/status/1263632539920424960 …
-
that's a bit shortsighted. djb is a world class developer. His response to this particular bug was wrong 15 years ago and it came back to bite us all in the ass. Would still trust his code over sendmail, postfix and bind.
His response to this bug and the development philosophy that caused it demonstrates a profound disconnect with modern secure coding standards. Would not trust qmail over postfix. Would still trust his crypto over openssl. Nobody is a "world class developer" in all fields.
