An interesting meditation, to be sure.

How secure is a properly compiled and sha-checked source install of Perl and its core sockets modules? I would start with search of the Common Weakness Enumeration, National Vulnerability Database, or similar trusted site. Also, a look at rt.perl.org (searching for "CVE-", or similar) might be assistive.

Are they prone to breaking, are there obvious security flaws? Recently at $job I heard a discussion about issues reported in a security scan because the version of perl being used supposedly had vulnerabilities. (From what I read on the specific vulnerabilities, however, it appeared they involved setting environment variables, but it would be something to find out more about.)

Would you trust it in encrypted communications? I think that would depend on a number of things. The first in my consideration, which also goes toward your later question of, would Perl stand up in court as being a viable software choice? would be on whether the whole thing were home-grown, or if modules (CPAN or otherwise) were used, if the modules used are available for examination, if the module developer has sufficient expertise and experiencing in cryptographic matters, and if there are sufficient tests to reasonably assure a user that due diligence was taken (among others).

Personally, I would not specifically rule in or out a product on the basis of the language used, as "crap code can be written in any language" (I think there is an actual quote like that, although something different being written). If the author(s) are diligent, use care in the code they develop and in the process of selecting what outside code they may use, and are transparent and responsive, I do not see a reason why it could not be plausible.

My $0.02, at least. Hope that helps.

In reply to Re: security and Perl by atcroft
in thread security and Perl by zentara

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.