Disagreement over security disclosures and bug-fixing priorities led to split.
  • A core developer of Nginx, the popular web server, has quit the project and started a fork called freenginx.
  • The developer cited disagreements with the new management at F5, which acquired Nginx Inc. in 2019, over security policies.
  • The dispute arose from the assigning of Common Vulnerabilities and Exposures (CVEs) to bugs in the experimental HTTP/3 code.

Archive link: https://archive.ph/U4XRN

  • DeebsterEnglish
    47•4 months ago

    I think most people share your confusion. It seems that F5 was following their responsibility as a CNA, but one guy disagreed enough to leave with all his toys.