undefined | Better HN

0 pointsBSousa13y ago0 comments

Do you suggest an alternative? That works on Mac/Linux.

Is Python/Django that much secure or just not targeted enough?

I'm evaluating languages/frameworks for a project and I really want to use Haskell and yesod or happstack, but after starting my project in them, I always end up going back to Rails for the documentation/ease. I may try and stick to it this time but any suggestions would be great.

0 comments

2 comments · 2 top-level

wyuenho13y ago

Python.org's been targeted quite enough alright[1].

PyPI is arguably more secure though the surrounding implementations are spotty. You can at least verify the package uploader's identity with some certainty using PyPISSH[2], and sign your package with GPG[3]. The problem is, PyPISSH and signing your package with GPG are not required for compatibility reasons.

[1]: http://wiki.python.org/moin/WikiAttack2013

[2]: http://pypi.python.org/pypi/pypissh

[3]: http://pypi.python.org/security

slurgfest13y ago

Much as I prefer Python, I don't think that switching to it just for more security is going to be very satisfying or have a huge return.

I submit that security is typically more a function of your project than JUST the language it is written in. For example, I doubt that Haskell's focus on type safety alone will make your programs secure (particularly when you are not enjoying it and are spending more time than you want on issues other than security). You may get more bang for the buck by focusing on security as an issue within whatever language you are using?

j / k navigate · click thread line to collapse