ariadne/shttpd: A toy HTTP server in development Goals: secure, scalable (vertically and horizontally), not excessively slow, separation of privilege (and knowledge: HTTP code doesn't have to know TLS key) ...

A toy HTTP server in development Goals: secure, scalable (vertically and horizontally), not excessively slow, separation of privilege (and knowledge: HTTP code doesn't have to know TLS key) ...

238 Achegas

6 Branches

0 Lanzamentos

Ariadne Devos 2bee9d4835 Merge branch 'ip' into odd-fixes		%!s(int64=5) %!d(string=hai) anos
arch	dc807d81a0 Correct operand order and types -- again	%!s(int64=5) %!d(string=hai) anos
buffer	98f95d2749 Recognise sizes be > SSIZE_MAX	%!s(int64=5) %!d(string=hai) anos
collateral	896ddc89f7 Introduce SPDX-License-Identifier	%!s(int64=5) %!d(string=hai) anos
doc	d8dd0d8fc1 Add missing wrap-around theorem	%!s(int64=5) %!d(string=hai) anos
fd	896ddc89f7 Introduce SPDX-License-Identifier	%!s(int64=5) %!d(string=hai) anos
generic	896ddc89f7 Introduce SPDX-License-Identifier	%!s(int64=5) %!d(string=hai) anos
http	896ddc89f7 Introduce SPDX-License-Identifier	%!s(int64=5) %!d(string=hai) anos
lex	e9731e2561 Add some remarks from the mutation testing	%!s(int64=5) %!d(string=hai) anos
sHT	6783ce8d69 Fail to contract bounds check and index masking	%!s(int64=5) %!d(string=hai) anos
stuff	896ddc89f7 Introduce SPDX-License-Identifier	%!s(int64=5) %!d(string=hai) anos
task	5dc5e07aa0 Outroduce superfluous sHT_modulo_nospec	%!s(int64=5) %!d(string=hai) anos
tests	5e2be17982 Test IPv4 parser	%!s(int64=5) %!d(string=hai) anos
tools	896ddc89f7 Introduce SPDX-License-Identifier	%!s(int64=5) %!d(string=hai) anos
worker	12471fdde3 Add missing semicolon	%!s(int64=5) %!d(string=hai) anos
.gitignore	9b7e0811af Git-Ignore nano leftovers	%!s(int64=5) %!d(string=hai) anos
CFLAGS	b0832f6aaf Correct suggested command in CFLAGS	%!s(int64=5) %!d(string=hai) anos
COPYING	5248a3d7de Declare some functions and structures for workers	%!s(int64=6) %!d(string=hai) anos
Makefile.am	5e2be17982 Test IPv4 parser	%!s(int64=5) %!d(string=hai) anos
README	896ddc89f7 Introduce SPDX-License-Identifier	%!s(int64=5) %!d(string=hai) anos
configure.ac	573c3e438a Introduce architecture-specific directory	%!s(int64=5) %!d(string=hai) anos
control.h	896ddc89f7 Introduce SPDX-License-Identifier	%!s(int64=5) %!d(string=hai) anos
fd.h	896ddc89f7 Introduce SPDX-License-Identifier	%!s(int64=5) %!d(string=hai) anos
worker.h	896ddc89f7 Introduce SPDX-License-Identifier	%!s(int64=5) %!d(string=hai) anos

		
			
			
				README
			
		
		
	
			
				.. SPDX-License-Identifier: GPL-3.0-or-later
.. Copyright © 2018-2019 Ariadne Devos

# s^2 Web Stuff

s^2 is -- so far -- a personal project to write secure and sandboxed software
for doing things on the web. E.g. a web server and mail server and client.
In contrast to seemingly wide-held opinion, except perhaps by Intel,
it doesn't view speculative execution as an evil (*).

(*)
  Except Meltdown and perhaps some others ... The model of Spectre I
  address is: all branches may temporarily be ignored or falsily taken and all
  indirect branch must be retpolined. Checking the page bits may be speculated.

  s^2 should be safe against Speculative Store Bypass, Bounds Check Bypass,
  Branch Target Injection. Foreshadow is not relevant. Lazy FP State Restore
  is a bug of the kernel.

As an extension to what nginx supports, s^2 will allow migration to
different versions and machines. The source code is intended to be readable.

There is some architecture-specific code for Spectre mitigation.
Linux is supported, and the BSDs will be. W32 might be possible.

Do `autoreconf` && `./configure` && `make` to compile.
A CFLAGS argument of "$(sed '/^[*/#]/d' CFLAGS |tr '\n' ' ')"
is recommended, although compiler support may vary.

## Stuff

- [ ] apps/website.md: for static web sites, may be extended
- [ ] apps/torrent.md (TODO: bittorrent, webtorrent, Dat, IPFS, gnunet?)
- [ ] apps/mail.md: e-mail client and server, encrypted, signed, image support)
- [ ] apps/blog.md (TODO)
- [ ] apps/git.md (TODO)
- [ ] apps/ci.md (TODO)

## Some design details

OO is used, except that inheritance isn't really used. Nothing is overridden.
Generics may be used sparely. SMP may be used for efficiency (power-efficiency
according to Intel?), but is not mandatory. Tasks of the same type are batched
to reduce cache pressure and branch misprediction.

## Contact

Do NOT send a mail to Ariadne Devos , as I can't login anymore.
Instead, open a bug at . Patches, ideas and
general discussion are welcome.

## Legal stuff

The license text is in `COPYING` (the GNU General Public License,
version 3 or later (at your choice). See `doc/license-copyright.rst`
for more information on copyright and licensing.

			
		