AsiaBSDCon 2017 Secure CGI

Conclusions?

Use libpq(3) with an active PostgreSQL database: the simplicity of SQLite is a lie. This, however, will simply push complexity into the PostgreSQL server. It will leave our application with only needing file desriptors to communicate with the database server, which works well with both Capsicum and pledge.