[hsivonen]

I think this is the disconnect. One can understand why curl is written in C, not expect Daniel to write it in another language, appreciate that the overall vulnerability count being impressively low considering how old the project is, and still worry about the section about vulnerabilities in the original post looking dismissive when it comes to vulnerabilities that are attributable to C and perhaps getting trotted out in the future by others contemplating new projects as an excuse not to use a safe language.

[empath75]

Yeah, I absolutely think that curl should stay a C project until the day it dies. I also think someone should write a curl-alternative in rust. And at some point, people may start using the Rust version instead of the c version.