From: "Theo de Raadt" Subject: Re: libtls: a step towards privsep by default To: Julius Chrobak Cc: tech@openbsd.org Date: Sat, 13 Apr 2024 10:32:56 -0600 If I understand this proposal, it is that libtls would eventually start to call call fork. I think it is not a good idea to have libraries that call fork themselves. It is something that a program should be responsible for, not a library. Programs handle process hierarchies and the consequences of having children, and this should not be a surprising feature of using a library.