Hacker News Reader

Parent Full thread

nikolay

Here's more about NAXSI: https://www.nbs-system.co.uk/blog-2/naxsi-web-application-fi...

Although, it's sad that Nginx chose the unreleased v3 of ModSecurity [0] [1] for their commercial offering instead.

[0]: https://www.modsecurity.org/

[1]: https://github.com/SpiderLabs/ModSecurity-nginx

View on HN

Since this doesn't go well with HTTP/2 so far, we'll have to stick with ModSec for the time being.

> https://github.com/nbs-system/naxsi/issues/227

It seems that the issue is fixed: https://github.com/nbs-system/naxsi/issues/227#issuecomment-...

Thanks!

It's how they make money, but it is sad from an OSS developer perspective. At least they didn't offer it and then remove it like TypeSafe did with their Slick/MSSQL driver.

I've written a thing about this kind of business model: http://penguindreams.org/blog/the-philosophy-of-open-source-...

Why is that sad? Modsecurity sources are freely available on github - and nginx.com emails are seen in the commits.

Reply on news.ycombinator.com