Adding functionality is not just a matter of adding code.

This will surprise some of your readers, but my primary interest is not with computer security. I am primarily interested in writing software that works as intended.

When I write software, I know that it will fail, either due to my own mistake, or due to some other cause.

I was going to visit IBM for six months as a visiting scientist. Now, six months is a lot of time, so I came with a whole list of projects that I might want to work on.

Most of the effort in the software business goes into the maintenance of code that already exists.

Defect-free software does not exist.

The Postfix security model is based on keeping software simple and stupid.