Miss Dada  🏳️‍⚧️

It's a sad day for #rustlang: actix-web is dead. I am not feeling very good about our community today. https://words.steveklabnik.com/a-sad-day-for-rust …

I've been extremely disappointed with how everyone has acted in this repeating thunderstorm, thanks for writing this out

I've said this before, but we don't have enough documentation on unsafe best practices (nomicon helps, isn't everything). When it's your own opinion vs a Reddit mob and there's no "higher authority" to refer to, what the fuck do you think is going to happen

Granted, this could probably use a paragraph explaining that this is true even if the unsafe function is private, and that having this boundary is to help audit and maintain code, not just providing safe public APIs

I think there's a TON of nuance involved when it comes to private functions, around where the boundary should be. We typically pick "the module" but it's not quite that in particular the standard you have set makes it impossible to effectively write FFI code

And yes, there's a generally agreed upon standard that the community has mostly settled on, that's close to what you say and also works for FFI, but it's super nuanced and not documented anywhere. Very understandable if someone makes the wrong conclusion from one line of docs

Sure. And nobody was pushing on "use unsafe correctly", which is part of the problem. IMO if the function folks were complaining about was itself marked `unsafe` it'd be fine