Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LiteSpeed QUIC (LSQUIC) is an open-source implementation of QUIC and HTTP/3

github.com

Post reply on HN
Print view View original

1–10 of 44 posts

Re: LiteSpeed QUIC (LSQUIC) is an open-source implementation of QUIC and HTTP/3

#3

Post by jarym »

garblegarble wrote: post #2

I know it's an oft-repeated comment here but it does bear repeating: is it really a good idea to keep writing these libraries dealing with complex untrusted user supplied data in C?

Well if you're an experienced C developer then yes it does.

Re: LiteSpeed QUIC (LSQUIC) is an open-source implementation of QUIC and HTTP/3

#4

Post by garblegarble »

jarym wrote: post #3
garblegarble wrote: post #2

I know it's an oft-repeated comment here but it does bear repeating: is it really a good idea to keep writing these libraries dealing with complex untrusted user supplied data in C?

Well if you're an experienced C developer then yes it does.

But lots of the vulnerable C code we have in the world today was written by very experienced C developers, so I don't know that's a particularly strong argument

Re: LiteSpeed QUIC (LSQUIC) is an open-source implementation of QUIC and HTTP/3

#6

Post by vlmutolo »

garblegarble wrote: post #2

I know it's an oft-repeated comment here but it does bear repeating: is it really a good idea to keep writing these libraries dealing with complex untrusted user supplied data in C?

There are some good rust implementations of QUIC, too.

Cloudflare: https://lib.rs/crates/quiche

Mozilla: https://lib.rs/gh/mozilla/neqo/neqo-interop

Re: LiteSpeed QUIC (LSQUIC) is an open-source implementation of QUIC and HTTP/3

#7

Post by jeffbee »

garblegarble wrote: post #2

I know it's an oft-repeated comment here but it does bear repeating: is it really a good idea to keep writing these libraries dealing with complex untrusted user supplied data in C?

I guess there is an audience for this stuff, among embedded systems developers or whatever, but after a brief look at the project it doesn't strike me as a project written with the care needed for C libraries. It is severely under-documented, for starters. For example, the word "thread" does not appear anywhere.

Not sure why one would choose this over QUICHE.

Re: LiteSpeed QUIC (LSQUIC) is an open-source implementation of QUIC and HTTP/3

#8

Post by mhh__ »

jarym wrote: post #3
garblegarble wrote: post #2

I know it's an oft-repeated comment here but it does bear repeating: is it really a good idea to keep writing these libraries dealing with complex untrusted user supplied data in C?

Well if you're an experienced C developer then yes it does.

Of course my code has no bugs in it!

Re: LiteSpeed QUIC (LSQUIC) is an open-source implementation of QUIC and HTTP/3

#10

Post by rapsey »

vlmutolo wrote: post #6
garblegarble wrote: post #2

I know it's an oft-repeated comment here but it does bear repeating: is it really a good idea to keep writing these libraries dealing with complex untrusted user supplied data in C?

There are some good rust implementations of QUIC, too. Cloudflare: https://lib.rs/crates/quiche Mozilla: https://lib.rs/gh/mozilla/neqo/neqo-interop

Also quinn: https://crates.io/crates/quinn
Post reply on HN