Nginx now overtakes the default Apache 1 as the new httpd on OpenBSD. In the process of integrating it, OpenBSD already gave back patches for more security (like chroot support). I am very excited about that decision.
Any specific reason why they used Apache 1 instead of Apache 2. I guess the obvious answer would be security but, in what way?
OpenBSD has maintained their own hardened fork of Apache 1.x for years. I think that switching to 2.x would be a monumental effort for them and set them back quite a ways in terms of security. I think that nginx is a great move for OpenBSD.
Last I knew, it was less about the effort, more about the license. And if you really need/want Apache 2, it's available in the ports tree and as a package. #> pkg_add apache-httpd
The Apache License 2.0 was not acceptable.
What do they use to launch CGI? Did they write something custom?