Ask HN: is Nginx trusted?

10 points by hoodoof 12y ago ↗ HN

Given that it's developed in Russia, does the Russian equivalent of the NSA have code in there?

8 comments

[ 3.1 ms ] story [ 30.9 ms ] thread

misframer 12y ago ↗

The source code is available, so theoretically you could check.

hoodoof 12y ago ↗

That might not be enough...... http://en.wikipedia.org/wiki/Underhanded_C_Contest

tptacek 12y ago ↗

No, the Russians have mot backdoored nginx.

clubhi 12y ago ↗

mot is russian for secretly

tptacek 12y ago ↗

It's American for "I am typing this on an iPhone keyboard".

hadoukenio 12y ago ↗

Which is made in China.

airjd 12y ago ↗

I just use it to proxy my static resources.

mattwritescode 12y ago ↗

I think you probably have to worry more about the general security of your servers. Its really quite easy to do something stupid which can leave you exposed.

Im sure the russians have better things to be doing rather than looking at you (no offence).