<story><title>BCHS software stack: BSD, C, httpd, SQLite</title><url>https://learnbchs.org/</url></story><parent_chain></parent_chain><comment><author>bkallus</author><text>I&amp;#x27;ve spent the better part of the year messing around with every HTTP server I could get my hands on. I would not recommend OpenBSD httpd.&lt;p&gt;It&amp;#x27;s supposed to be simple, and it is simple compared to Apache, but it also has way fewer eyes on it. Ultimately, a big pile of string-handling C is likely to have some problems. There was a trivial-to-exploit server-crashing segfault in httpd&amp;#x27;s FastCGI implementation that was only fixed in the last month or so. There were also recent issues related to null bytes and line feeds in headers causing strange, exploitable misinterpretations of incoming requests in relayd. Much of this is now fixed, but I wouldn&amp;#x27;t be at all surprised if there were more low-hanging fruit remaining.&lt;p&gt;If you&amp;#x27;re looking for a lightweight HTTP server written in C, I recommend Lighttpd. It&amp;#x27;s older, more widely-used, and more standards-compliant. I&amp;#x27;m not trying to dump on OpenBSD; I run it on my primary laptop. I just wouldn&amp;#x27;t use their HTTP tools for anything mission-critical yet.</text></comment>
<story><title>BCHS software stack: BSD, C, httpd, SQLite</title><url>https://learnbchs.org/</url></story><parent_chain></parent_chain><comment><author>dang</author><text>Related:&lt;p&gt;&lt;i&gt;BCHS: OpenBSD, C, httpd and SQLite web stack&lt;/i&gt; - &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=29988951&quot;&gt;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=29988951&lt;/a&gt; - Jan 2022 (149 comments)&lt;p&gt;&lt;i&gt;BCHS stack – BSD, C, httpd, SQLite&lt;/i&gt; - &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=28269399&quot;&gt;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=28269399&lt;/a&gt; - Aug 2021 (58 comments)&lt;p&gt;&lt;i&gt;BCHS: The BSD, C, httpd, SQLite stack for the web&lt;/i&gt; - &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=23148871&quot;&gt;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=23148871&lt;/a&gt; - May 2020 (1 comment)&lt;p&gt;&lt;i&gt;OpenBSD, C, httpd and SQLite – Web App stack&lt;/i&gt; - &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=17272225&quot;&gt;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=17272225&lt;/a&gt; - June 2018 (174 comments)&lt;p&gt;&lt;i&gt;BCHS stack – BSD, C, httpd, SQLite&lt;/i&gt; - &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=14580746&quot;&gt;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=14580746&lt;/a&gt; - June 2017 (75 comments)&lt;p&gt;&lt;i&gt;Kwebapp: rapid BCHS web app development&lt;/i&gt; - &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=14454381&quot;&gt;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=14454381&lt;/a&gt; - May 2017 (1 comment)&lt;p&gt;&lt;i&gt;BCHS Stack - BSD, C, Httpd, SQLite&lt;/i&gt; - &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=11763888&quot;&gt;https:&amp;#x2F;&amp;#x2F;news.ycombinator.com&amp;#x2F;item?id=11763888&lt;/a&gt; - May 2016 (68 comments)</text></comment>