On: Toxic – A distributed, secure, command-line based instant messenging client

[kevan]

The last reply to the issue:

"The Tox protocol is very easy to parse in C which means little chance of issues."

Building a homegrown parser and simultaneously expecting not to have security issues, that's true confidence.

[irungentoo → kevan]

If you actually read the code you will see that it's true.

The parsing is dead simple and written in a way that mistakes are very unlikely.

[nfkd → irungentoo]

That's a really bold statement to make. And why not use a proven secure parser in the first place?