"Postfix keeps running even if one Postfix process dies; Windows requires that someone restarts the service"
About this Quote
Venema is doing more than praising Unix mail software; he is smuggling in an entire worldview about how systems should fail. The line lands because it treats resilience as a default property, not an aspirational add-on: Postfix is built so that individual workers can crash without taking the whole machine down. That design choice encodes a kind of quiet humility about reality: processes will die, networks will hiccup, disks will misbehave, and software should absorb that mess without paging a human like its parent.
The Windows comparison isn’t just platform tribalism. It’s a jab at a service model that historically centered a monolithic, manager-approved notion of “running” that can collapse into a single point of human intervention. “Requires that someone restarts” is doing pointed work: it frames manual restarts as a cultural tax, a hidden dependency on an operator’s attention and availability. The subtext is that reliability isn’t merely uptime; it’s how much your system relies on heroics.
Context matters here: Venema is a security-minded engineer who helped shape the modern MTA ecosystem in an era when email was mission-critical infrastructure and exploits were routine. Postfix’s architecture (multiple small daemons, supervised and isolated) reflects security principles as much as operational ones: limit blast radius, assume compromise, keep components replaceable.
It’s a scientist’s critique delivered like a sysadmin’s joke: the best system isn’t the one that never breaks; it’s the one that doesn’t need you when it does.
The Windows comparison isn’t just platform tribalism. It’s a jab at a service model that historically centered a monolithic, manager-approved notion of “running” that can collapse into a single point of human intervention. “Requires that someone restarts” is doing pointed work: it frames manual restarts as a cultural tax, a hidden dependency on an operator’s attention and availability. The subtext is that reliability isn’t merely uptime; it’s how much your system relies on heroics.
Context matters here: Venema is a security-minded engineer who helped shape the modern MTA ecosystem in an era when email was mission-critical infrastructure and exploits were routine. Postfix’s architecture (multiple small daemons, supervised and isolated) reflects security principles as much as operational ones: limit blast radius, assume compromise, keep components replaceable.
It’s a scientist’s critique delivered like a sysadmin’s joke: the best system isn’t the one that never breaks; it’s the one that doesn’t need you when it does.
Quote Details
| Topic | Technology |
|---|---|
| Source | Help us find the source |
More Quotes by Wietse
Add to List








