Comment by uecker
2 days ago
Splitting programs into mutually untrusting modules is a plausible alternative to memory safety in programming languages.
Also in a program similar to qmail, memory safety alone is not sufficient, a lot of bugs in sendmail were related to complexity issues.
If only there was an OS design architecture that would follow such approach from the ground up....