Conversation

PHP is a lot like Windows in that its history of severe vulnerabilities has resulted in modern iterations being very secure while similar players in the space have stagnated.

PHP 7 ships with libsodium, has built-in password derivation support backed by argon2i or bcrypt, and a bunch of other goodies that Python for example doesn’t.

Theo de Radt seems to think Windows now does security and patching better than Linux or FreeBSD (but of course not OpenBSD 😉)