# WEBrick DOS Security Flaw

**URL:** <https://www.ruby-forum.com/t/webrick-dos-security-flaw/80637>\
**Category:** Ruby\
**Created:** [December 29, 2006, 4:02pm UTC](https://www.ruby-forum.com/t/webrick-dos-security-flaw/80637 "2006-12-29T16:02:20Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![coldtone](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/9e8a1a/32.png) [@coldtone](https://www.ruby-forum.com/u/coldtone)\
**Post date:** [December 29, 2006, 4:02pm UTC](https://www.ruby-forum.com/t/webrick-dos-security-flaw/80637/1 "2006-12-29T16:02:20Z")

</div>

Looks like WEBrick isn’t ready for production, but then I think most  
only use it with rails development, if not you may reconsider using  
in any production capacity until this flaw is addressed.

[http://rob.muhlestein.net/2006/12/webrick-security-flaw.html](http://rob.muhlestein.net/2006/12/webrick-security-flaw.html)

---

<div class="post-metadata">

**Author:** ![coldtone](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/9e8a1a/32.png) [@coldtone](https://www.ruby-forum.com/u/coldtone)\
**Post date:** [December 29, 2006, 8:31pm UTC](https://www.ruby-forum.com/t/webrick-dos-security-flaw/80637/2 "2006-12-29T20:31:32Z")

</div>

On Fri, 29 Dec 2006 09:55:59 -0500, Rob M. wrote:

> Looks like WEBrick isn’t ready for production, but then I think most  
> only use it with rails development, if not you may reconsider using in  
> any production capacity until this flaw is addressed.
> 
> [http://rob.muhlestein.net/2006/12/webrick-security-flaw.html](http://rob.muhlestein.net/2006/12/webrick-security-flaw.html)

To the “anonymous comment” person who posted:

> WEBrick may not have been subject to enough scrutiny because no one ever  
> suggests using it in production.

First, you are right, that did sound like FUD toward Ruby and you are  
right to point out that WEBrick is generally not recommended for  
production. I’ve changed the blog post hopefully to not appear as FUD  
toward Ruby itself, but it definitely is FUD for unsuspecting newbies  
who  
might try to use WEBrick as a production web server (a big mistake imho  
with the current state of WEBrick, but hopefully we can fix that).

BTW, I wouldn’t be bothering with these posts and fix discussions if I  
didn’t want to see Ruby, Rails, and even WEBrick succeed.