Will Crichton

Genuinely curious how you'd respond to the OpenSSH claims of both being secure and written in C.

It’s possible to write secure software in C and to write insecure software in any language. The problem is that we’ve repeatedly shown an inability to determine whether a piece of C software contains severe vulnerabilities of a class most languages make impossible. We don’t know.

The issue isn’t that all C code is inherently insecure, nor that other languages are immune to security flaws, but memory safety vulnerabilities are so severe and so easy to prevent that allowing them to happen is an irresponsible risk. This should be really basic stuff.